Mini Shai-Hulud in Tensorlake: A Token Monitor That Can Wipe Your Home Directory

The report

A malware campaign based on the npm Shai-Hulud tactics hit the Tensorlake AI sandboxing ecosystem. Learn about how it worked, how to detect it, and what to do if you’re impacted.

Read the full analysis: Mini Shai-Hulud in Tensorlake: A Token Monitor That Can Wipe Your Home Directory (Checkmarx).

Indicators

Malware C

• iseekaigogo[.]com

Defanged so they cannot be clicked by mistake: replace [.] with a dot. Shared hosting and CDN addresses named in the report are left out on purpose, so blocking these does not break legitimate sites.

How this is tracked

EncryptLayer intelligence, A.R.P. Syndicate’s open threat feed, reviews each indicator against the published report before adding it (#24). This page is generated from that record and the report’s own title and summary; nothing is rewritten.