TI Mindmap HUB
Threat Intelligence Report

tensorlake 0.5.144 npm Compromise Ships Mini Shai-Hulud

πŸ“… October 8, 2026 πŸ“° safedep.io πŸ” 0 CVE(s) referenced

The compromised tensorlake@0.5.144 npm release delivered Mini Shai-Hulud, a credential-stealing worm that spreads through npm and GitHub, executes remote C2 code, and may erase victims’ home directories when stolen GitHub tokens are revoked.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

πŸ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

πŸ“Š Visual Mindmap
🎯 IOC Extraction
βš”οΈ MITRE ATT&CK TTPs
πŸ“¦ STIX 2.1 Bundle