● latestSony’s So-net says intruder took 2.58 million member records and email passwords/New York governor signs law restricting AI companion features for minors/FTC orders nine companies to explain how personal data shapes prices and pay/How to back up a small business the 3-2-1 way, with ransomware in mind

Topic

Shai-Hulud

Security

Tensorlake npm package hijacked to spread Shai-Hulud credential-stealing worm

Version 0.5.144 of the tensorlake npm SDK shipped a Shai-Hulud worm variant that steals developer and cloud credentials and can wipe home directories if its stolen GitHub token is revoked.

October 8, 20264 min read