Compromised TensorLake SDK Threatens AI Developers via Supply Chain Attack
A compromised TensorLake npm package has enabled a supply chain attack allowing credential theft and remote code execution. Security researchers reveal malicious version 0.5.144 and recommend immediate patching and vigilance for AI developers.
By Gourav Rajput
















