{"id":3266,"date":"2026-10-09T06:53:05","date_gmt":"2026-10-08T23:53:05","guid":{"rendered":"https:\/\/vlobs.com\/blog\/?p=3266"},"modified":"2026-10-09T06:53:05","modified_gmt":"2026-10-08T23:53:05","slug":"worm-shai-hulud-tensorlake","status":"publish","type":"post","link":"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake","title":{"rendered":"SDK Tensorlake versi 0.5.144 Disusupi Worm Pencuri Kredensial"},"content":{"rendered":"<p><strong>VLOBS.COM<\/strong> &#8211; Worm pencuri kredensial Shai-Hulud ditemukan di paket npm SDK Tensorlake versi 0.5.144. Sejumlah peneliti keamanan melaporkan infeksi tersebut pada Kamis. Menurut perusahaan keamanan Socket, versi berbahaya itu ditandai oleh sistemnya 11 menit setelah diterbitkan.<\/p>\n<p>Npm telah menghapus versi yang terinfeksi, sementara Tensorlake menarik paket tersebut dan memperbaruinya ke versi 0.5.145. Besarnya dampak belum diketahui. Paket SDK itu digunakan untuk membuat dan mengelola lingkungan Tensorlake, platform cloud-native untuk menjalankan agen AI terisolasi dan kode buatan AI yang tidak tepercaya.<\/p>\n<p><strong>Baca juga<\/strong>: <a href=\"https:\/\/vlobs.com\/blog\/gemini-agen-ai-universal\">Google Cloud Jadikan Gemini Agen AI Universal untuk Perusahaan<\/a><\/p>\n<p>Analisis atas rilis berbahaya itu menunjukkan adanya kesamaan kode dan teknik dengan varian Shai-Hulud yang oleh peneliti dijuluki ChainDrop. Varian tersebut digunakan pada Agustus untuk menyusupi dependensi npm, termasuk keyv dan flat-cache.<\/p>\n<p><strong>Baca juga<\/strong>: <a href=\"https:\/\/vlobs.com\/blog\/diversifikasi-investasi\">Cramer: Diversifikasi Bantu Investor Bertahan Saat Saham AI Anjlok<\/a><\/p>\n<p>Menurut perusahaan keamanan rantai pasok SafeDep, varian ini dirancang untuk mencuri berbagai data, mulai dari dompet kripto dan kata sandi browser hingga rahasia GitHub Actions, kredensial cloud, serta token akun layanan. Data tersebut dikirim keluar, sementara worm tetap terhubung ke infrastruktur C2 untuk menunggu instruksi.<\/p>\n<p>Socket memperingatkan bahwa skrip instalasi SDK berbahaya dapat berjalan di komputer pengembang atau server build, di luar perlindungan sandbox Tensorlake. Dengan demikian, host bisa terdampak sebelum kode buatan AI dijalankan. Varian ini juga memantau token GitHub tertentu yang dicuri dan, dalam kondisi tertentu, dapat memicu penghapusan direktori home pengguna yang terinfeksi jika token dicabut.<\/p>\n<p><strong>Baca juga<\/strong>: <a href=\"https:\/\/vlobs.com\/blog\/bug-nvidia-dcgm-exporter\">Bug Nvidia Berisiko Tinggi Bisa Lumpuhkan Pemantauan GPU Server<\/a><\/p>\n<p>Socket menyarankan agar sistem yang terdampak dibangun ulang dari sumber tepercaya sebelum akses ke rahasia dipulihkan. Para peneliti juga memperingatkan agar pemantau token berbahaya dinonaktifkan sebelum kredensial yang terdampak dicabut. Pengguna Tensorlake disarankan memastikan bahwa mereka tidak memasang versi yang terinfeksi.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Paket npm SDK Tensorlake versi 0.5.144 terinfeksi Shai-Hulud dan ditandai 11 menit setelah diterbitkan. Dampaknya masih belum diketahui.<\/p>\n","protected":false},"author":0,"featured_media":3268,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[26,99],"tags":[566,2165,2164,2163,2166,2162,2160,2167,2161],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Worm Shai-Hulud Menyusup ke SDK Tensorlake di npm<\/title>\n<meta name=\"description\" content=\"Worm Shai-Hulud ditemukan pada SDK Tensorlake versi 0.5.144; npm menghapus paket setelah terdeteksi 11 menit sejak publikasi.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Worm Shai-Hulud Menyusup ke SDK Tensorlake di npm\" \/>\n<meta property=\"og:description\" content=\"Worm Shai-Hulud ditemukan pada SDK Tensorlake versi 0.5.144; npm menghapus paket setelah terdeteksi 11 menit sejak publikasi.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake\" \/>\n<meta property=\"og:site_name\" content=\"Vlobs Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-08T23:53:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/vlobs.com\/blog\/wp-content\/uploads\/2026\/10\/worm-shai-hulud-tensorlake.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"533\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake\",\"url\":\"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake\",\"name\":\"Worm Shai-Hulud Menyusup ke SDK Tensorlake di npm\",\"isPartOf\":{\"@id\":\"https:\/\/vlobs.com\/blog\/#website\"},\"datePublished\":\"2026-10-08T23:53:05+00:00\",\"dateModified\":\"2026-10-08T23:53:05+00:00\",\"author\":{\"@id\":\"\"},\"description\":\"Worm Shai-Hulud ditemukan pada SDK Tensorlake versi 0.5.144; npm menghapus paket setelah terdeteksi 11 menit sejak publikasi.\",\"breadcrumb\":{\"@id\":\"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/vlobs.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SDK Tensorlake versi 0.5.144 Disusupi Worm Pencuri Kredensial\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/vlobs.com\/blog\/#website\",\"url\":\"https:\/\/vlobs.com\/blog\/\",\"name\":\"Vlobs Blog\",\"description\":\"Informasi Berita Teknologi Internet Terkini\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/vlobs.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Worm Shai-Hulud Menyusup ke SDK Tensorlake di npm","description":"Worm Shai-Hulud ditemukan pada SDK Tensorlake versi 0.5.144; npm menghapus paket setelah terdeteksi 11 menit sejak publikasi.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake","og_locale":"en_US","og_type":"article","og_title":"Worm Shai-Hulud Menyusup ke SDK Tensorlake di npm","og_description":"Worm Shai-Hulud ditemukan pada SDK Tensorlake versi 0.5.144; npm menghapus paket setelah terdeteksi 11 menit sejak publikasi.","og_url":"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake","og_site_name":"Vlobs Blog","article_published_time":"2026-10-08T23:53:05+00:00","og_image":[{"width":800,"height":533,"url":"https:\/\/vlobs.com\/blog\/wp-content\/uploads\/2026\/10\/worm-shai-hulud-tensorlake.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake","url":"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake","name":"Worm Shai-Hulud Menyusup ke SDK Tensorlake di npm","isPartOf":{"@id":"https:\/\/vlobs.com\/blog\/#website"},"datePublished":"2026-10-08T23:53:05+00:00","dateModified":"2026-10-08T23:53:05+00:00","author":{"@id":""},"description":"Worm Shai-Hulud ditemukan pada SDK Tensorlake versi 0.5.144; npm menghapus paket setelah terdeteksi 11 menit sejak publikasi.","breadcrumb":{"@id":"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/vlobs.com\/blog\/worm-shai-hulud-tensorlake#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/vlobs.com\/blog\/"},{"@type":"ListItem","position":2,"name":"SDK Tensorlake versi 0.5.144 Disusupi Worm Pencuri Kredensial"}]},{"@type":"WebSite","@id":"https:\/\/vlobs.com\/blog\/#website","url":"https:\/\/vlobs.com\/blog\/","name":"Vlobs Blog","description":"Informasi Berita Teknologi Internet Terkini","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/vlobs.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/vlobs.com\/blog\/wp-json\/wp\/v2\/posts\/3266"}],"collection":[{"href":"https:\/\/vlobs.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vlobs.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/vlobs.com\/blog\/wp-json\/wp\/v2\/comments?post=3266"}],"version-history":[{"count":1,"href":"https:\/\/vlobs.com\/blog\/wp-json\/wp\/v2\/posts\/3266\/revisions"}],"predecessor-version":[{"id":3267,"href":"https:\/\/vlobs.com\/blog\/wp-json\/wp\/v2\/posts\/3266\/revisions\/3267"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vlobs.com\/blog\/wp-json\/wp\/v2\/media\/3268"}],"wp:attachment":[{"href":"https:\/\/vlobs.com\/blog\/wp-json\/wp\/v2\/media?parent=3266"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vlobs.com\/blog\/wp-json\/wp\/v2\/categories?post=3266"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vlobs.com\/blog\/wp-json\/wp\/v2\/tags?post=3266"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}