MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack
Brief
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Its main GitHub repository has about 11,500 stars and 1,100 forks.
Four malicious releases, three of the npm package @memtensor/memos-cloud-openclaw-plugin and one of the PyPI package MemoryOS, each currently the latest version on its registry, drop cross-platform Go binaries that search developer home directories for secrets and report to servers under skyleen[. ]fr.
Overview
#
On September 23, 2026, a threat actor published malicious releases of two MemTensor packages on two registries:
npm: @memtensor/memos-cloud-openclaw-plugin versions 0.
- 21, 0.
- 23 and 0.
- 25. This is MemTensor's OpenClaw lifecycle plugin, which adds MemOS Cloud memory recall and storage to OpenClaw agents. PyPI: MemoryOS version 2. 0.