Sandworm
Computer program
5
MENTIONS
3
EPISODES
3
PODCASTS
Search complete. 5 mentions across 3 episodes found for "Sandworm".
Oct 9, 2026
Steve PrenticeSOUNDBITE_SPEAKER
Tensor Lake SDK is a package that has around 12,000 downloads per week.
Steve PrenticeSOUNDBITE_SPEAKER
Analysis of the malicious release suggests, quote, "That it shares code and techniques with the Shaihulud variant dubbed Chain Drop," end quote, and is designed to steal credentials including crypto wallets, browser passwords, GitHub actions, secrets, cloud credentials, and to also self propagate.
Steve PrenticeSOUNDBITE_SPEAKER
Tensor Lake is a cloud-native platform for running isolated AI agents and untrusted AI-authored code.
Gerald AugerHOST
All right.
Gerald AugerHOST
Um, so again, the s- the stories today are ki- I mean, they're interesting, but they're not, like, groundbreaking or anything like that.
Gerald AugerHOST
Um, I feel like my run to the coffee was, like, more exciting than some of these stories.
Gerald AugerHOST
But all right, so Shaihulud was a hot mess express maybe, I don't know, three s- three to six months ago.
Gerald AugerHOST
It, it, it's back.
Shlomi Ben HaimGUEST
Nine a month.
Shlomi Ben HaimGUEST
NPM, MCP, Shai Hulud, Skills-
Mandeep SinghHOST
Yeah
Shlomi Ben HaimGUEST
...
Shlomi Ben HaimGUEST
... or a human developer.
Shlomi Ben HaimGUEST
What we saw with JFrog Curation from the beginning of this year is just amazing.
Shlomi Ben HaimGUEST
Every time that there was another Shai Hulud, every time that there was another change in policy, every time that people thought that scanning software supply chain is good enough and preventing is something that they don't need to think about, they were proved wrong.
Shlomi Ben HaimGUEST
And, you know, touch wood, 100% success with JFrog customers, uh, using JFrog Curation.
speaker_0HOST
Top story number three.
speaker_0HOST
Mandiant says an attacker hijacked an active AI coding assistant session at an unnamed software-as-a-service provider and used it to spread the Shai-Hulud worm across about 100 internal repositories.
speaker_0HOST
The campaign began after a poisoned software recommendation was accepted, then escalated through a malicious PyPI package, stolen GitHub OAuth tokens and an infected package in the company's own namespace, ultimately stealing source code and secrets.
speaker_0HOST
The case underscores how AI-assisted development can become an entry point for supply chain compromise, prompting calls for checksum verification, stricter secret handling, and controlled dependency routing.