Attributed metadata history
Up to 100 retained publisher events per page for 213b0b8ceddad290e6ccbcff2a48edd149f89706951c7f1a1675686f8e4c9646. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_636032c91a0b4c9a97
observed · 2026-10-12 10:37:04 UTC
The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 "contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code," Socket said
Fingerprint: b56d07391a461a78d98db106d52afa60703e3dad7caae31a1d6e71b31f6e16a6
intelligence_src_636032c91a0b4c9a97
observed · 2026-10-12 10:37:03 UTC
available
Fingerprint: cc58046b4b1d7fb963844e45a69d2195cff987918478e05287925b56bc65734d