Malicious code in tensorlake (npm)

{
  "id": "884464b034250e026e22e472ef28ed9864102b31d175a93f72b6ebd6c30ce9de",
  "url": "https://osv.dev/vulnerability/MAL-2026-17650",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Malicious code in tensorlake (npm)",
    "summary": "--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (898b31edaabc82c76dc8d25f10ceee38c7ef51ee34887461a5bc8ce9f0378b50) The npm package tensorlake@0.5.144 ships lib/setup.mjs as a heavily obfuscated single-line script using hex-mangled identifiers (_0x15c964, _0x35672e,...), a transformation shape typical of hostile loader code rather than ordinary minification. Multiple shipped bundles under dist/ (dist/index.cjs, dist/applications/index.cjs, dist/sandbox-image.cjs, dist/function-agent/main.cjs, dist/function-executor/main.cjs, and their.js counterparts) combine require(\"child_process\") with repeated POST request primitives and shell utilities such as curl and ping, including host/id-collection patterns alongside outbound HTTP calls. Automated contextual tracing of these files was blocked by the provider safety filter after the model engaged with the content, which is a pattern that correlates with hostile code rather than benign SDK traffic. The combination of an obfuscated setup script and child_process + hardcoded HTTP POST patterns in the shipped bundles is consistent with install-time or load-time execution of attacker-controlled behavior against the installer's host. ## Source: ghsa-malware (de1a505f248f0041777b65937111dd0448f6a5e84fa4e3b95a0a00cb21b7589c) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a dif",
    "evidence": "osv:MAL-2026-17650",
    "products": [
      {
        "name": {
          "value": "tensorlake",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "0.5.144",
            "evidence": "/affected/0/versions"
          }
        ]
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "MAL-2026-17650",
      "aliases": [
        "GHSA-rqxj-g25x-4v9v",
        "MAL-2026-17650"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "SEMVER",
              "events": [
                {
                  "introduced": "0"
                }
              ]
            }
          ],
          "package": {
            "name": "tensorlake",
            "purl": "pkg:npm/tensorlake",
            "ecosystem": "npm"
          },
          "versions": [
            "0.5.144"
          ],
          "database_specific": {
            "cwes": [
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              },
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              },
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              }
            ],
            "source": "https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/tensorlake/MAL-2026-17650.json",
            "indicators": {
              "evidence_files": [
                {
                  "path": "dist/applications/index.cjs",
                  "tlsh": "33f385882ef7112246a3b0b92d2b9041b635c41b354ddda5bacc83d06fd553cd6fbba8",
                  "sha256": "1c122fd5ed053ede14819e125db3356ff614ccb6e50acc5dbf352cd209424f0e"
                },
                {
                  "path": "dist/applications/index.js",
                  "tlsh": "4af384882ef7112246a370b96e1ba041b235c41b344ddda5bacc43d46fd563cd6fbba8",
                  "sha256": "0f626f1de3ae1e9537e3c8d7af7989c0adecaf8dcb8e8988ca090be7fb03106f"
                },
                {
                  "path": "dist/function-agent/main.cjs",
                  "tlsh": "cb5371893af721628663b07a292f91117139d007344dedd4bb9c46e02fd5a38dbb7b9c",
                  "sha256": "fb80770885b18b4da5fbdd706530a1b8e70e9116416f328eb44770290eda95a3"
                },
                {
                  "path": "dist/function-agent/main.js",
                  "tlsh": "255383887af7216286a3b07a291f5111b138d007345dedd4bb9c46d02fd6a38dbb7b9c",
                  "sha256": "fc3860125139122dbca252bae799e893fe4dbbaf6f891c87effbd85c42d44a7f"
                },
                {
                  "path": "dist/function-executor/main.cjs",
                  "tlsh": "6704878a2af711538663717e9e1f51127136c00b3d0adc98be8c46d06f9963c97b7fa8",
                  "sha256": "6e8cb3fbef3aa115942c0af6f7522f6c0cadde8a490be4d2797b1c8ab30cb738"
                },
                {
                  "path": "dist/function-executor/main.js",
                  "tlsh": "9d04878a2af711538663717e9e1f51127135c00b3d0adc98be8c46d06f9963c97bbfa8",
                  "sha256": "afdf283a99ffc1d5b88582df2501a683ffa830bc5e05da4c08b586877b7c7f59"
                },
                {
                  "path": "dist/index.cjs",
                  "tlsh": "e674d7442af7113542a371b96e2b90417230d11b390deda87adc43d06f9962ce7fafb9",
                  "sha256": "402bda2a20773deb49de1f5cdf3b93afde006218bd759a1ddc2c08f12e890fcf"
                },
                {
                  "path": "dist/index.js",
                  "tlsh": "1574c7442af7113542a371b95e2ba0417230d11b390deda87adc43d06f9962ce7fafb9",
                  "sha256": "b7f30353f4c25b97904496e2b2cb5d69d49f2cd29b92d6e3c6f1f17df524f532"
                },
                {
                  "path": "dist/sandbox-image.cjs",
                  "tlsh": "c563a6446af7612246a361ba2e3ba1417234d01b254cdd64bbdc83d47fc612cd7f3baa",
                  "sha256": "1b68dffd1e9379decd34e52749642152cef3573387627f49685e9b93f5173cf3"
                },
                {
                  "path": "dist/sandbox-image.js",
                  "tlsh": "9a6396546af7512242a331ba2e2ba1417234d01b354ddd64bbcc83d47fd612ce6f3baa",
                  "sha256": "a453624abe35c450f9d4a701683e797944a1737b247ef5e5331efe5e5e90c774"
                },
                {
                  "path": "lib/setup.mjs",
                  "tlsh": "a1e2b5c862c17ad017865efbbe1fe5e5f61e68953188488bfc44fc8ca962252cde1770",
                  "sha256": "25a0735d0db7dc40e5d45ce42d9c106067e6a66e184d967cfecfab17c3bcb5ef"
                },
                {
                  "path": "runtime/function-executor/package/dist/function-executor/main.js",
                  "tlsh": "9d04878a2af711538663717e9e1f51127135c00b3d0adc98be8c46d06f9963c97bbfa8",
                  "sha256": "afdf283a99ffc1d5b88582df2501a683ffa830bc5e05da4c08b586877b7c7f59"
                },
                {
                  "path": "runtime/typescript-function-runner/package/dist/function-agent/main.js",
                  "tlsh": "255383887af7216286a3b07a291f5111b138d007345dedd4bb9c46d02fd6a38dbb7b9c",
                  "sha256": "fc3860125139122dbca252bae799e893fe4dbbaf6f891c87effbd85c42d44a7f"
                }
              ]
            }
          }
        }
      ],
      "modified": "2026-10-08T06:45:19.255308715Z",
      "provider": "osv",
      "references": [
        "https://github.com/advisories/GHSA-rqxj-g25x-4v9v",
        "https://www.npmjs.com/package/tensorlake/v/0.5.144"
      ],
      "provider_metadata": {
        "malicious-packages-origins": [
          {
            "id": "GHSA-rqxj-g25x-4v9v",
            "sha256": "de1a505f248f0041777b65937111dd0448f6a5e84fa4e3b95a0a00cb21b7589c",
            "source": "ghsa-malware",
            "versions": [
              "0.5.144"
            ],
            "import_time": "2026-10-08T03:35:05.490606121Z",
            "modified_time": "2026-10-08T02:54:40Z"
          },
          {
            "id": "GHSA-rqxj-g25x-4v9v",
            "ranges": [
              {
                "type": "SEMVER",
                "events": [
                  {
                    "introduced": "0"
                  }
                ]
              }
            ],
            "sha256": "ee81e66c5969ba443fdfe172ed48e09d5e4a0c705bdb6c916298d1244b12c2d2",
            "source": "ghsa-malware",
            "versions": [
              "0.5.144"
            ],
            "import_time": "2026-10-08T04:33:59.551168327Z",
            "modified_time": "2026-10-08T04:15:18Z"
          },
          {
            "id": "IN-MAL-2026-021152",
            "sha256": "898b31edaabc82c76dc8d25f10ceee38c7ef51ee34887461a5bc8ce9f0378b50",
            "source": "amazon-inspector",
            "versions": [
              "0.5.144"
            ],
            "import_time": "2026-10-08T06:34:02.41012411Z",
            "modified_time": "2026-10-08T05:51:05Z"
          }
        ]
      }
    },
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 98612,
  "published_at": "2026-10-08T02:54:39+00:00"
}