Poisoned Pipeline / Incidents / AS134

AS134 · 2025-10

TensorFlow.js typosquat targeting ML developers

npmAI coding agents

SafeDep: malicious npm package typosquatting tensorflow / TensorFlow.js
to hit AI/ML developers.

Mapped techniques

• T0129 Typosquatting
• T0109 Publish malicious artifact

supply-chain campaign

Sources

• https://safedep.io/malicious-npm-package-targeting-tensorflow-users