TensorLake npm SDK implanted with malicious code in ChainDrop Shai-Hulud credential-stealing attack

Socket detected that version 0.5.144 of Tensorlake's npm SDK was implanted with credential-stealing malicious code, part of the ChainDrop / Shai-Hulud supply chain attack. This version was published on October 8, 2026 at 01:12 UTC, and Socket flagged it about 11 minutes later. The malicious package executes an obfuscated loader via a preinstall hook, steals npm, GitHub, AWS, HashiCorp Vault, and Kubernetes credentials, and collects configuration from AI development tools such as .claude, .cursor, Windsurf, and Zed, as well as MCP configuration, then self-propagates using stolen publishing credentials. The payload resolves a remote endpoint through an Ethereum contract and includes a persistence component that monitors GitHub tokens; when a token is revoked, it triggers clearing of the user's home directory. Socket recommends removing the persistence component before revoking credentials.