OTX Threat: TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack

The Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop/Shai-Hulud supply chain attack, affecting a package with approximately 12,000 weekly downloads. The malicious release contains obfuscated code that harvests credentials from multiple sources including npm tokens, GitHub tokens, AWS credentials, HashiCorp Vault, Kubernetes configurations, SSH keys, and AI development tools. A pre Sectors: Technology