Tensorlake: Poisoned npm SDK release plants credential-stealing worm targeting AI coding tools

A compromised version (0.5.144) of Tensorlake’s npm SDK was published on October 8, 2026, after an attacker pushed malicious code into the project’s GitHub repository and released it through the project’s own CI workflow. The package’s preinstall hook deployed a credential-stealing worm designed to harvest npm and GitHub tokens, cloud and Kubernetes secrets, SSH keys, cryptocurrency wallets, and configuration files from AI coding tools such as Claude Code, Cursor, Kiro, Windsurf, and Zed. The malicious version was live for roughly 1 hour 40 minutes before being removed, and Tensorlake says it has found no evidence the compromised package was installed or exploited.