Socket: compromised tensorlake 0.5.144 on npm targets keys, AI configs
A compromised release of Tensorlake's SDK for AI agents contains malware, according to Socket, which also sets out the order of the cleanup.
Source of truthsocket.dev/blog/tensorlake-compromiseAccording to Socket, version 0.5.144 of tensorlake, the npm SDK for Tensorlake's AI agent infrastructure, was compromised in a supply chain attack (ChainDrop / Shai-Hulud) and contains malware. It was published on October 8 at 01:12 UTC, and Socket flagged it about 11 minutes later. Where lifecycle scripts are permitted, a preinstall hook runs the malicious loader at install time; Socket says developers do not need to import the SDK or start an agent for it to run. Socket says the payload targets npm and GitHub tokens, AWS credentials, SSH keys, and the configuration and MCP files of .claude, .cursor, .kiro, Windsurf and Zed. Socket advises removing gh-token-monitor before revoking any tokens: according to Socket, revoking the stolen GitHub token while the monitor is still running triggers a dead-man switch that wipes the user's home directory.
Related stories
Microsoft: Storm-0940 group automated attacks with AI agents
According to Microsoft, Storm-0940, which it assesses as China-state aligned, used the open-source ARTEX framework to automate attacks targeting hundreds of organizations; most of the targeting was not successful.
LiteLLM: malicious version 1.107.0 published to PyPI and Docker
According to LiteLLM, version 1.107.0, pushed on October 21, contained malware that steals credentials. LiteLLM advises anyone who installed it on a host with outbound internet access to assume the data was exfiltrated and to rotate keys and secrets.