Shai-Hulud worm in Tensorlake npm SDK steals AI agent credentials

A malicious version 0.5.144 of the Tensorlake npm SDK (~12,000 weekly downloads) harvested GitHub and npm tokens, cloud keys, SSH keys and AI tool configs (.claude, .cursor, Windsurf, Zed). If the stolen GitHub token was revoked, a background service ran rm -rf ~/ on the victim's machine.

• Version 0.5.144 was published on October 8 via the project's legitimate release workflow with valid provenance
• The payload collected npm and GitHub tokens, AWS, Vault and Kubernetes credentials, SSH keys and MCP configs
• Revoking the stolen GitHub token triggered a wipe of the home directory
• Socket flagged the release 11 minutes after publication; the C2 address was resolved via an Ethereum contract