At a Glance Attribute Details Malware Family sckit Go binary Threat Actor Unknown Target Victims AI developers and LLM researchers Delivery Vector Malicious npm and PyPI package releases Key Capabilities Credential harvesting, background execution, environment scanning Source Socket Executive Summary A severe software supply chain attack hit the popular open-source AI memory framework MemOS. The MemTensor MemOS compromise distributed credential-stealing malware to artificial intelligence developers.

MemOS (Preview) | Intelligence Begins with Memory. Contribute to MemTensor/MemOS development by creating an account on GitHub.

Compromised MemTensor packages across npm and PyPI are delivering the sckit credential stealer, enabling multi-platform credential theft for Windows, Linux, and macOS users.

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According to reports from Aikido, SafeDep, Socket, and StepSecurity, the libraries in question below - @memtensor/memos-cloud-openclaw-plugin versions

Compromised MemTensor npm and PyPI packages deliver sckit, a Go-based stealer targeting cloud, registry, source-code, and developer credentials.

Compromised MemTensor npm and PyPI packages deliver sckit, a Go-based stealer targeting cloud, registry, source-code, and developer credentials.

Threat actors have compromised MemTensor packages on npm and PyPI to deploy the sckit credential stealer, targeting sensitive cloud and developer secrets.

Compromised MemTensor packages on npm and PyPI are delivering the multi-platform sckit credential stealer, jeopardizing user credentials across Windows, Linux, and macOS.

Compromised MemTensor packages on npm and PyPI delivered the Go-based sckit implant across Windows, Linux, and macOS. Attackers stole publish […]

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According to reports from Aikido, SafeDep, Socket, and StepSecurity, the libraries in question below - @memtensor/memos-cloud-openclaw-plugin versions

Compromised MemTensor npm and PyPI packages deliver sckit, a Go-based stealer targeting cloud, registry, source-code, and developer credentials.

Threat actors are leveraging compromised MemTensor packages on npm and PyPI to distribute 'sckit,' a multi-platform Go-based credential stealer, posing a significant data theft risk to Windows…

A Go binary called sckit was added to four malicious releases, targeting developer secrets.

The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package M...

Haz clic para acceder al contenido completo.

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According to reports from Aikido, SafeDep, Socket, and StepSecurity, the libraries in question below - @memtensor/memos-cloud-openclaw-plugin versions