Hijacked TensorLake npm Turned Install Into Credential Risk

A malicious npm release of the TensorLake TypeScript SDK included a preinstall hook that executed an obfuscated Bun-launched payload to search for developer credentials (GitHub tokens, Vault creds, AI-tool configs), accept remote JavaScript commands, and optionally use a GitHub fallback to create public repositories and commit collected data (potentially exposing stolen tokens). The payload also contains logic to modify accessible repositories (committing .claude and .vscode files) and intentionally skips some CI environments; investigators should assume credentials available to affected installs may be compromised, look for the WORMTAG string "tensrlake", review GitHub and Vault audit logs, and remove persistence before rotating tokens.