Security1 hOctober 11, 2026, 00:25

Analysis: Tensorlake npm SDK compromise, Nvidia GPU telemetry leaks and AI-driven Korean bank attacks

A breakdown of three Q4 2026 incidents: the Tensorlake npm SDK compromise, exposed Nvidia GPU monitoring dashboards and AI-augmented attacks on South Korean banks. The author links them into a single chain of supply-chain and operational security failures.

DEV Community

Open source

Analysis: Tensorlake npm SDK compromise, Nvidia GPU telemetry leaks and AI-driven Korean bank attacks

Tensorlake SDK compromise replicated the MALFEX npm campaign pattern
Exposed GPU dashboards reveal topology and compute schedules
AI-generated phishing against Korean banks uses LinkedIn profile data
All three vectors are mapped to MITRE ATT&CK techniques

#Tensorlake#Nvidia#Npm

Tensorlake npm package compromised to spread Shai-Hulud credential-stealing worm

Security

Compromised MemTensor packages push sckit credential stealer via npm and PyPI

Security

North Korean hackers posed as recruiters, infected 30,000 devices

Security

Analysis: Tensorlake npm SDK compromise, Nvidia GPU telemetry leaks and AI-driven Korean bank attacks

Tensorlake npm package compromised to spread Shai-Hulud credential-stealing worm

Compromised MemTensor packages push sckit credential stealer via npm and PyPI

North Korean hackers posed as recruiters, infected 30,000 devices

AI agent swarm compromised 440 PaperCut servers in 26 seconds each