Shai-Hulud Malware Hijacks Tensorlake npm Package, 12K Weekly Downloads
Image
Global – October 27, 2026 -- A malicious version of the tensorlake npm package (0.5.144), which draws about 12,000 weekly downloads, was published carrying Shai-Hulud malware, according to OX Security.
Malware wipes the host if a stolen GitHub token is revoked
The payload contains a kill-switch string, IfYouRevokeThisTokenItWillWipeTheComputerOfTheOwner, identical to the one used in the TanStack attack in May. Revoking the stolen GitHub token triggers rm -rf ~/ on Unix systems or Remove-Item on the Windows user profile.
OX advises isolating the machine from the network and killing the gh-token-monitor persistence before revoking anything. Any machine that installed tensorlake@0.5.144 should be treated as fully compromised, with all GitHub, npm, cloud, Vault, SSH and CI secrets rotated.