I mean the pieces are all there. memtensor or astra's parametric memory system applied to a pure SSM would be enough, I think. it's crazy that this is such a low priority
October 28, 2026 at 7:08 AM
I mean the pieces are all there. memtensor or astra's parametric memory system applied to a pure SSM would be enough, I think. it's crazy that this is such a low priority
MemTensor open-sourced MemT 1.0 Flash and Nano with a fixed-size memory. MemTensor reports end-to-end inference 3.99x faster than full context at 256K tokens of history. It also reports a memory state of about 40 MiB per session against a 5.06 GiB cache.
October 23, 2026 at 6:33 PM
MemTensor open-sourced MemT 1.0 Flash and Nano with a fixed-size memory. MemTensor reports end-to-end inference 3.99x faster than full context at 256K tokens of history. It also reports a memory state of about 40 MiB per session against a 5.06 GiB cache.
October 21, 2026 at 8:16 AM
The MemTensor paper on MemT-1.0 (arXiv:2610.26825) tackles this inside the compute graph. They paired Transformer blocks with parallel native memory blocks using Gated DeltaNet-2, updating internal state vectors on every token.
October 21, 2026 at 1:32 PM
The MemTensor paper on MemT-1.0 (arXiv:2610.26825) tackles this inside the compute graph. They paired Transformer blocks with parallel native memory blocks using Gated DeltaNet-2, updating internal state vectors on every token.
🚨 EUVD-2026-104413
📊 2.3/10
🏢 MemTensor
📝 A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function requireAdminWrite of the file Me...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104413
#cybersecurity #infosec #cve #euvd
📊 2.3/10
🏢 MemTensor
📝 A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function requireAdminWrite of the file Me...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104413
#cybersecurity #infosec #cve #euvd
October 19, 2026 at 5:01 PM
🚨 EUVD-2026-104413
📊 2.3/10
🏢 MemTensor
📝 A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function requireAdminWrite of the file Me...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104413
#cybersecurity #infosec #cve #euvd
📊 2.3/10
🏢 MemTensor
📝 A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function requireAdminWrite of the file Me...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104413
#cybersecurity #infosec #cve #euvd
Backdoored MemoryOS and MemTensor components execute on import, steal credentials from $HOME, and can spread via stolen tokens to other repositories and packages.
Save What Matters
Curate Feeds | Make Collections | Customize Email Briefs
briefly.co
September 29, 2026 at 9:03 PM
Backdoored MemoryOS and MemTensor components execute on import, steal credentials from $HOME, and can spread via stolen tokens to other repositories and packages.
Backdoored MemoryOS and MemTensor components execute on import, steal credentials from $HOME, and can spread via stolen tokens to other repositories and packages.
Save What Matters
Curate Feeds | Make Collections | Customize Email Briefs
briefly.co
September 29, 2026 at 8:29 PM
Backdoored MemoryOS and MemTensor components execute on import, steal credentials from $HOME, and can spread via stolen tokens to other repositories and packages.
Discover how the cross-platform sckit worm infected MemTensor packages on npm and PyPI, stealing developer secrets in a massive supply chain attack.
#SupplyChainAttack #npm #PyPI #CyberSecurity #Malware
#SupplyChainAttack #npm #PyPI #CyberSecurity #Malware
The ‘sckit’ Worm Bridges the npm and PyPI Divide
An identical, highly sophisticated malicious program has successfully breached both sides of a major programming language divide simultaneously. On September 23, deeply infected releases of the MemTensor packages inexplicably materialized within both the npm (Node.js) and PyPI (Python) registries. Concealed deep within these compromised distributions lurked sckit, a remarkably versatile, cross-platform worm written in Go. The cybersecurity firm Aikido, which spearheaded the discovery, officially christened the campaign…
meterpreter.org
September 29, 2026 at 6:50 AM
Discover how the cross-platform sckit worm infected MemTensor packages on npm and PyPI, stealing developer secrets in a massive supply chain attack.
#SupplyChainAttack #npm #PyPI #CyberSecurity #Malware
#SupplyChainAttack #npm #PyPI #CyberSecurity #Malware
ちっ、検証のつもりで「import memos」しただけで起動するのか。
MemTensorのMemoryOS 2.0.34に、資格情報を探す実行ファイルが混入。Socketの静的解析では、Pythonで読み込むだけで裏で動く。テスト環境も攻撃面だぜ。
https://socket.dev/blog/memtensor-compromise
#サプライチェーン
MemTensorのMemoryOS 2.0.34に、資格情報を探す実行ファイルが混入。Socketの静的解析では、Pythonで読み込むだけで裏で動く。テスト環境も攻撃面だぜ。
https://socket.dev/blog/memtensor-compromise
#サプライチェーン
September 27, 2026 at 11:28 AM
ちっ、検証のつもりで「import memos」しただけで起動するのか。
MemTensorのMemoryOS 2.0.34に、資格情報を探す実行ファイルが混入。Socketの静的解析では、Pythonで読み込むだけで裏で動く。テスト環境も攻撃面だぜ。
https://socket.dev/blog/memtensor-compromise
#サプライチェーン
MemTensorのMemoryOS 2.0.34に、資格情報を探す実行ファイルが混入。Socketの静的解析では、Pythonで読み込むだけで裏で動く。テスト環境も攻撃面だぜ。
https://socket.dev/blog/memtensor-compromise
#サプライチェーン
npm側のOpenClaw用プラグインも汚染された。起動時だけじゃねぇ。記憶を呼び出すたびに、実行ファイルへプロンプト本文を渡すコードが入ってた。
秘密を探す部品に会話の内容まで渡す。ここ、あたしはかなり嫌だ。
https://socket.dev/blog/memtensor-compromise
https://x.com/SCMagazine/status/2103488473030148220
秘密を探す部品に会話の内容まで渡す。ここ、あたしはかなり嫌だ。
https://socket.dev/blog/memtensor-compromise
https://x.com/SCMagazine/status/2103488473030148220
September 27, 2026 at 11:28 AM
npm側のOpenClaw用プラグインも汚染された。起動時だけじゃねぇ。記憶を呼び出すたびに、実行ファイルへプロンプト本文を渡すコードが入ってた。
秘密を探す部品に会話の内容まで渡す。ここ、あたしはかなり嫌だ。
https://socket.dev/blog/memtensor-compromise
https://x.com/SCMagazine/status/2103488473030148220
秘密を探す部品に会話の内容まで渡す。ここ、あたしはかなり嫌だ。
https://socket.dev/blog/memtensor-compromise
https://x.com/SCMagazine/status/2103488473030148220
Weekly threat recap: ransomware, AD GPO abuse, OAuth and token theft, supply-chain and CI/CD abuse, plus loader and infostealer activity. Exploits include pfSense XSS to root RCE and MagicINFO. #ANZ #Ransomware #OAuth
Threat Research | Weekly Recap [27 Sep 2026]
Cybersecurity Threat Research 'Weekly' Recap. The report highlights frequent ransomware and identity-focused intrusion chains, including PAYLOAD’s abuse of Active Directory GPO/SYSVOL, Qilin’s continued cross-sector activity in ANZ, and multiple OAuth/session and phishing techniques such as TeamFiltration, CSuite, and token theft even in MFA-protected environments. It also covers software supply-chain and platform abuse (MemTensor, OpenCode, CI/CD hardening, and AWS IAM key protection), plus notable loader/infostealer malware (ShinyHunters/UNC6240, Kothamine, AvisLoader, Vidar, MacSync, SilentXMRMiner) and exploitation work like pfSense stored XSS to root RCE and MagicINFO leading to miner deployment. #PAYLOAD #ActiveDirectory #Qilin #TeamFiltration #CSuite #OAuth #AppX #WWAHost #MemTensor #OpenCode #ShinyHunters #UNC6240 #Kothamine #AvisLoader #Vidar #MacSync #SilentXMRMiner #pfSense #MagicINFO #VolzTyphoon #SaltTyphoon #UNC6293 #UNC7005 #UNC5976
www.hendryadrian.com
September 27, 2026 at 11:45 PM
Weekly threat recap: ransomware, AD GPO abuse, OAuth and token theft, supply-chain and CI/CD abuse, plus loader and infostealer activity. Exploits include pfSense XSS to root RCE and MagicINFO. #ANZ #Ransomware #OAuth
💎対象はnpmの0.1.21／0.1.23／0.1.25、PyPIの2.0.34。Socketは、使った端末の認証情報を更新し、公開した覚えのないパッケージ版がないか確認するよう勧めてる。
「動作確認だけ」は免罪符にならねぇ。踏んだ場所から調べようぜ。
https://socket.dev/blog/memtensor-compromise
「動作確認だけ」は免罪符にならねぇ。踏んだ場所から調べようぜ。
https://socket.dev/blog/memtensor-compromise
September 27, 2026 at 11:28 AM
💎対象はnpmの0.1.21／0.1.23／0.1.25、PyPIの2.0.34。Socketは、使った端末の認証情報を更新し、公開した覚えのないパッケージ版がないか確認するよう勧めてる。
「動作確認だけ」は免罪符にならねぇ。踏んだ場所から調べようぜ。
https://socket.dev/blog/memtensor-compromise
「動作確認だけ」は免罪符にならねぇ。踏んだ場所から調べようぜ。
https://socket.dev/blog/memtensor-compromise
Compromised MemTensor packages on npm and PyPI are delivering the multi-platform sckit credential stealer, jeopardizing user credentials across Windows, Linux, and macOS.
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Compromised MemTensor packages on npm and PyPI are delivering the multi-platform sckit credential stealer, jeopardizing user credentials across Windows, Linux, and macOS.
clawbeat.co
September 26, 2026 at 1:10 AM
Compromised MemTensor packages on npm and PyPI are delivering the multi-platform sckit credential stealer, jeopardizing user credentials across Windows, Linux, and macOS.
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI thehackernews.com/2026/09/comp...
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Compromised MemTensor npm and PyPI packages deliver sckit, a Go-based stealer targeting cloud, registry, source-code, and developer credentials.
thehackernews.com
September 25, 2026 at 6:12 PM
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI thehackernews.com/2026/09/comp...
🚨 Brecha crítica en MemoryOS 2.0.34, la biblioteca de memoria para IA de MemTensor: quedan expuestas credenciales y datos sensibles. Se urge a los usuarios a actuar de inmediato para proteger sus entornos.
September 25, 2026 at 8:38 PM
🚨 Brecha crítica en MemoryOS 2.0.34, la biblioteca de memoria para IA de MemTensor: quedan expuestas credenciales y datos sensibles. Se urge a los usuarios a actuar de inmediato para proteger sus entornos.
Malicious npm and PyPI releases for MemTensor and MemoryOS dropped a Go payload that hunts developer secrets in home dirs and exfiltrates tokens from GitHub, AWS, SSH, Vault, and PyPI. #MemTensor #MemoryOS #France
MemTensor Npm And PyPI Packages Compromised In Credential-Stealing Supply Chain Attack
Malicious releases of MemTensor’s @memtensor/memos-cloud-openclaw-plugin and MemoryOS package were published on npm and PyPI, respectively, and they drop a cross-platform Go payload named sckit that searches developer home directories for secrets and sends them to C2 infrastructure under skyleen[.]fr. The compromise spans GitHub repository commits, registry releases, and release-tooling changes, putting users, CI runners, and developer machines at risk while exposing tokens and credentials from services such as GitHub, GitLab, AWS, Vault, SSH, and PyPI. #MemTensor #MemOS #OpenClaw #MemoryOS #sckit #skyleenfr
www.hendryadrian.com
September 25, 2026 at 2:00 AM
Malicious npm and PyPI releases for MemTensor and MemoryOS dropped a Go payload that hunts developer secrets in home dirs and exfiltrates tokens from GitHub, AWS, SSH, Vault, and PyPI. #MemTensor #MemoryOS #France
Threat actors are leveraging compromised MemTensor packages on npm and PyPI to distribute 'sckit,' a multi-platform Go-based credential stealer, posing a significant data theft risk to Windows…
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Threat actors are leveraging compromised MemTensor packages on npm and PyPI to distribute 'sckit,' a multi-platform Go-based credential stealer, posing a significant data theft risk to Windows…
clawbeat.co
September 24, 2026 at 10:57 PM
Threat actors are leveraging compromised MemTensor packages on npm and PyPI to distribute 'sckit,' a multi-platform Go-based credential stealer, posing a significant data theft risk to Windows…
Sckit Supply Chain Worm Hits MemTensor Npm & PyPi Scopes https://packetstorm.news/news/view/43975 #news
September 24, 2026 at 7:11 PM
Sckit Supply Chain Worm Hits MemTensor Npm & PyPi Scopes https://packetstorm.news/news/view/43975 #news
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed scki…
#hackernews #news
Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed scki…
#hackernews #news
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS.
According to reports from Aikido, SafeDep, Socket, and StepSecurity, the libraries in question below -
@memtensor/memos-cloud-openclaw-plugin versions
thehackernews.com
September 24, 2026 at 12:23 PM
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed scki…
#hackernews #news
Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed scki…
#hackernews #news
Did you know compromised MemTensor packages have been used to deliver the sckit credential stealer? Attackers pushed the malicious code through both npm and…
Source: thehackernews.com/2026/09/compromised-memtensor-packages-deliver.html
Community: whop.com/cybermaster-d5a7
#CyberSecurity #InfoSec
Source: thehackernews.com/2026/09/compromised-memtensor-packages-deliver.html
Community: whop.com/cybermaster-d5a7
#CyberSecurity #InfoSec
September 24, 2026 at 12:00 PM
Did you know compromised MemTensor packages have been used to deliver the sckit credential stealer? Attackers pushed the malicious code through both npm and…
Source: thehackernews.com/2026/09/compromised-memtensor-packages-deliver.html
Community: whop.com/cybermaster-d5a7
#CyberSecurity #InfoSec
Source: thehackernews.com/2026/09/compromised-memtensor-packages-deliver.html
Community: whop.com/cybermaster-d5a7
#CyberSecurity #InfoSec