Compromised Tensorlake npm release spreads credential-stealing worm

Tensorlake's npm package version 0.5.144 contained a credential-stealing worm that could spread through victims' package publishing accounts, Socket found. The package provides a TypeScript development kit for Tensorlake applications, sandboxes and cloud services. The malicious version is no longer available from npm. An installation hook launched malware that harvested secrets from local files, automated development environments, Kubernetes and Vault, established persistence and executed remotely supplied code. The worm could republish compromised packages using a victim's publishing identity. StepSecurity said the repository's release workflow published the malicious version after rogue commits began on October 7. The malware also planted files that rerun it when projects open in Claude Code or VS Code, allowing access to persist after dependency removal.