“Shai-Hulud: Here We Go Again” – “tensorlake” npm Package Hit With Malware

What the source says

Shai-Hulud is back for another round, this time hijacking the Tensorlake package, 12k weekly downloads Breaking News: Shai-Hulud malware affecting “tensorlake” package version 0.5.144, Overview A malicious version of tensorlake (version 0.5.144) was published to npm with Shai-Hulud malware. The malware also contains an Ethereum contract address, which is tie

The original publication, including any images and updates, remains with the publisher.