Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA256VerifiedSignal 56/100
25a0735d0db7dc40e5d45ce42d9c106067e6a66e184d967cfecfab17c3bcb5ef
Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Found in 2 reports: Tensorlake npm Package Compromised: A Worm With a Hostage Token That Wipes Your Machine If You Revoke It; TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
75%
Signal Score
56 / 100
IDS Rule
Yes
Threat Context
Feed Intelligence Summary
2 reports75% confidence
Step Security
Oct 8, 2026
Tensorlake npm Package Compromised: A Worm With a Hostage Token That Wipes Your Machine If You Revoke It
2 IOCs in report
Socket Security
Oct 8, 2026
2 IOCs in report