Security Alert: MemTensor AI memory component poisoned, PyPI/npm packages execute malicious programs upon loading.

BlockBeats news, September 24: SlowMist issued a warning that MemTensor's AI long-term memory toolchain has suffered a supply chain attack. Affected are the open-source library MemoryOS for LLM/Agent (PyPI version 2.0.34), and the official plugin memtensor/memos-cloud-openclaw-plugin that connects to the OpenClaw runtime (npm versions 0.1.21, 0.1.23, 0.1.25). These versions contain a built-in cross-platform Go binary that executes when the package is imported or the OpenClaw gateway starts. Attackers can steal npm/PyPI tokens, GitHub/GitLab credentials, AWS keys, SSH keys, API tokens, and environment variables and other developer credentials and exfiltrate data; the npm plugin may also leak user prompts.

SlowMist advises users to immediately uninstall or roll back to known safe versions (npm use 0.1.20, PyPI use 2.0.33), terminate related sckit processes, block associated infrastructure, investigate network activity, and rotate all credentials in affected environments.