Yhn WarTerrorism first seen 19 h ago, last 4 h ago, peak #8
Tensorlake NPM package and repo compromised
A report says the Tensorlake NPM package and its associated repository have been compromised, raising supply-chain security concerns for projects that depend on it. The issue was filed publicly on the project's GitHub tracker, where users typically alert maintainers to hijacked packages or malicious code. Developers are likely reviewing dependency versions and awaiting confirmation from the Tensorlake team.
Why now: A compromise of a popular NPM package can expose downstream projects to malicious code, so developers are urgently checking whether they are affected.
Rank over time, top of the chart is #1. 12 snapshots from 19 h ago to 4 h ago.
Evidence
- Tensorlake NPM package and repo compromised · varunsharma07 · 9
API: https://socialmediatrends-api.osmike.com/v1/trends/1889934