Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Malicious Tensorlake npm Package Steals AWS Keys, SSH Credentials and Crypto Wallet Data
Excerpt
A threat actor published a compromised version of the Tensorlake npm package on October 8, 2026, embedding malware designed to steal developer secrets and spread through connected software supply chains. The affected release, 0.5.144, contains a variant of the Shai-Hulud worm . Its targets include AWS access keys, SSH credentials, cryptocurrency wallet files, browser data, and secrets stored in development environments. Tensorlake provides a serverless sandbox for AI agents.…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | iseekaigogo.com | High | Score 58/100 | First seen |
| SHA1 | b614155fd88114d40549b259457bcf921df091b9 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…