Thursday, October 8, 2026 · 1 of 5

1. Tensorlake npm SDK hijacked to spread the Shai-Hulud credential worm; it plants config files that re-run when a repo is opened in Claude Code or VS Code

   Oct 7–8SecurityAgents