MemTensor AI Memory Tool Supply Chain Under Attack, Developer Credentials Face Leakage Risk

TechFlow reports that on September 24, according to monitoring by blockchain security firm SlowMist (@SlowMist_Team), the AI memory toolkit MemoryOS (on PyPI) under MemTensor and its OpenClaw plugin (on npm) suffered a supply chain attack. The affected versions contain cross-platform Go binaries that automatically execute malicious code when the package is loaded or imported.

Affected versions include MemoryOS==2.0.34 on PyPI, along with plugin versions 0.1.21, 0.1.23, and 0.1.25 on npm. Attackers can exploit this to steal sensitive information such as npm/PyPI tokens, GitHub/GitLab credentials, AWS keys, SSH keys, API tokens, and environment variables. The stolen data is exfiltrated to attacker-controlled infrastructure at skyleen[.]fr, and the affected npm plugins may also expose user prompt content.

SlowMist recommends that users immediately downgrade the relevant packages to secure versions (0.1.20 for npm, 2.0.33 for PyPI), terminate sckit-related processes, block related infrastructure, review network activity, and rotate all credentials in affected environments.