OX Security reported on October 8, 2026 that Tensorlake npm package version 0.5.144 was published with Shai-Hulud malware. Its affected-package table names that specific version, rather than every release of Tensorlake.
The researchers describe heavily obfuscated code with logic for stealing browser data, cloud configuration, environment variables and other credentials. Their report also identifies crypto-draining functionality. These are findings from their analysis, not an independently measured count of affected users.
OX Security says it observed five GitHub repositories uploaded with stolen credentials following the attack. That repository count is not a count of organizations or customers compromised, and it should not be treated as a complete measure of the incident.
The analysis identifies public encryption keys different from those in previously observed Shai-Hulud variants. The researchers say this may indicate an independent actor or a new group using the name and code. That is an attribution hypothesis, not proof of a particular attacker identity.
The report also describes a destructive token-revocation kill switch. Incident response therefore needs care: this brief does not turn a research article into instructions to manipulate credentials on an affected machine. Security teams should use the full technical analysis and validated response procedures for their own environment.
The supported news is a researcher-reported malicious package version and its analyzed behavior. The source does not establish that every Tensorlake installation is compromised, provide a verified total victim count or identify a confirmed safe replacement version.