SafeDep reports that on September 23, 2026 an attacker published malicious versions of two MemTensor packages, the OpenClaw plugin @memtensor/memos-cloud-openclaw-plugin on npm and the MemoryOS library on PyPI, both carrying the same Go implant, sckit. The binary runs whenever the package loads rather than through an install hook, so –ignore-scripts does not help: it harvests credentials from the home directory, sends them to servers under skyleen[.]fr, and carries code to copy itself into other repositories and packages the stolen credentials can reach. The attacker obtained the publish tokens from MemTensor’s own GitHub Actions release pipelines by pushing commits that made the release job hand over the npm or PyPI token before it published, and the affected npm versions alternated with clean releases, leaving 0.1.21, 0.1.23, and 0.1.25 malicious and MemoryOS 2.0.34 affected.
MemTensor npm and PyPI Packages Hit by a Go Worm
SafeDep reports that on September 23, 2026 an attacker published malicious versions of two MemTensor packages, the OpenClaw plugin @memtensor/memos-cloud-openclaw-plugin on npm and the MemoryOS library on PyPI, both carrying the same Go implant, sckit. The binary runs whenever the package loads rather than through an install hook, so --ignore-scripts does not help: it harvests credentials from the home directory, sends them to servers under skyleen[.]fr, and carries code to copy itself into other repositories and packages the stolen credentials can reach. The attacker obtained the publish tokens from MemTensor's own GitHub Actions release pipelines by pushing commits that made the release job hand over the npm or PyPI token before it published, and the affected npm versions alternated with clean releases, leaving 0.1.21, 0.1.23, and 0.1.25 malicious and MemoryOS 2.0.34 affected.
Source: Safedep