GCVE-110-OSM-2026-13407

Version 0.5.144 of the tensorlake npm SDK was published with a preinstall hook that runs an obfuscated loader, which launches a credential-stealing, self-propagating payload. Socket links it to the Shai-Hulud / ChainDrop campaign. Malicious version: 0.5.144 (published 2026-10-08T01:12:07Z) Malicious payload found in: package.json preinstall -> node lib/setup.mjs lib/setup.mjs is an obfuscated loader; lib/Math_Symbol.js is the obfuscated stealer/worm payload. Behavior: harvests credentials from local files, CI and cloud environments, exfiltrates them, installs persistence, and republishes other packages using the victim's npm identity. Contains the literal string IfYouRevokeThisTokenItWillWipeTheComputerOfTheOwner, seen in earlier Shai-Hulud waves.