The AI Ecosystem Has Worms Now: Inside the MemTensor Compromise

A reported compromise of MemTensor’s MemOS AI memory framework illustrates a supply chain attack that embeds credential-stealing malware in normal runtime paths rather than relying on installation scripts or typosquatting. Malicious releases published on September 23, 2026 affected the npm package @memtensor/memos-cloud-openclaw-plugin versions 0.1.21, 0.1.23, and 0.1.25 and the PyPI package MemoryOS version 2.0.34, with the Python payload activating during package import and the npm payload activating when OpenClaw starts or recalls memory. The malware, known as sckit, searches hosts for credentials, environment variables, registry tokens, cloud and source-control keys, Hugging Face tokens, and potentially prompt content, then sends collected information to command-and-control infrastructure. The incident highlights the heightened risk to AI development tooling, where systems often hold numerous credentials and may receive less supply-chain scrutiny than traditional software dependencies. Organizations that used the affected versions are advised to treat impacted machines and CI runners as compromised, remove or downgrade the packages, rotate accessible secrets, investigate unexpected package releases, remove malware artifacts, block associated infrastructure, and adopt dependency inventory, trusted publishing, and provenance verification practices.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.