Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

Tensorlake npm Package Compromised: A Worm With a Hostage Token That Wipes Your Machine If You Revoke It

Step Security
Step Security
Published October 8, 2026Original Report

Threat Actors

Malware Families

Excerpt

Tensorlake npm Package Compromised: A Worm With a Hostage Token That Wipes Your Machine If You Revoke It - StepSecurity Skip to main content Platform Platform Overview Dev Machine Guard Code Repo Security Secure Registry CI/CD Security Threat Intel Customers Pricing Resources Blog Product Tour Dev Machine Guard on GitHub Harden Runner on GitHub GitHub Actions Audit Documentation Company About Us Newsroom Trust Center Request a Demo Login Platform Platform Overview Dev Machine…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYPlayINFRASTRUCTUREunknownCAPABILITYMETA StealerPlayVICTIMunknown
Adversary(1)
Infrastructure
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA25625a0735d0db7dc40e5d45ce42d9c106067e6a66e184d967cfecfab17c3bcb5efHighScore 56/100First seen
SHA256b50a00900399ba99fb6ce1fc151519cb99d44320ef2a631f2237e1aea0ad6fecHighScore 56/100First seen

IOC Relationship Graph

Building graph…