Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit, designed for Windows, Linux, and macOS.

Details from Security Researchers

According to reports from Aikido, SafeDep, Socket, and StepSecurity, the compromised libraries include:

• @memtensor/memos-cloud-openclaw-plugin (npm)

The incident involves the distribution of a credential stealer through these legitimate packages, affecting users across multiple platforms.