Executive Summary
Two legitimate MemTensor packages on npm and PyPI, including an OpenClaw memory plugin, were compromised to deliver the sckit credential stealer.
What Happened
Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According to reports from Aikido, SafeDep, Socket, and StepSecurity, the libraries in question below - @memtensor/memos-cloud-openclaw-plugin versions
Affected Products
- MemTensor packages
- OpenClaw
Vulnerability / Attack Technique
Compromised AI agent plugin packages
Technical Mechanism
Malicious versions installed a cross-platform implant.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
Agent memory plugins are now supply-chain targets. RealGround analysis: pin agent plugin versions.
Recommended Controls
- Remove affected MemTensor versions and rotate credentials
- Pin agent plugin versions
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/09/compromised-memtensor-packages-deliver.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.