Shai-Hulud tensorlake npm preinstall loader: node setup.mjs, Bun and dev-config

Adarsh Pandey@Pandeyadarsh

•updated today•1•0•1

Detects the behavior chain associated with Shai-Hulud (tensorlake@0.5.144) where Node.exe executes setup.mjs, followed by Bun executing specific payload scripts (Math_Symbol.js, math_init.js, opensearch_init.js, or ai_init.js), accompanied by configuration file drops in .claude or .vscode directories.