Shai Hulud

A compromised release of the tensorlake npm SDK (version 0.5.144) carries a Shai-Hulud / ChainDrop-family worm. A preinstall hook runs setup.mjs, skips CI so it lands on developer laptops, pulls the Bun runtime and executes an obfuscated payload that steals GitHub and npm tokens, cloud keys, Kubernetes and Vault secrets, SSH keys, browser logins and AI-tool configs, then republishes itself into every package the stolen npm token can reach. The twist: a “gh-token-monitor” service wipes the home directory if you revoke the stolen GitHub token. Safe version to pin: 0.5.143. Developing story — what’s confirmed, what isn’t, and the order of operations for cleanup.

A malicious @subql/common on npm stole .npmrc, .env, AWS, SSH and GitHub keys — part of ChainDrop, a Shai-Hulud-family worm. The defender’s playbook.

A maintainer account compromise poisoned keyv, flat-cache, file-entry-cache and the rest of the family, then spread to 868 more packages across 1,381 versions — over 2 billion monthly installs. The releases were signed by GitHub Actions and the provenance checks out. That is the part worth your attention.

A hacker used the self-propagating Shai-Hulud npm worm to breach AI music company Suno, leaking source code that details how its training corpus was scraped — plus customer emails, phone numbers, and Stripe data. Here is what actually happened and what security leaders should take from it.