Back

MemTensor AI memory tools compromised with cross-platform malware

  • MemTensor’s AI memory toolchain was compromised with malicious code in PyPI and npm packages.
  • MemoryOS 2.0.34 and npm plugin versions 0.1.21, 0.1.23 and 0.1.25 were affected.
  • SlowMist advised downgrading, terminating sckit, blocking infrastructure and rotating credentials.

MemTensor’s AI memory toolchain was compromised, according to a SlowMist security alert. The affected packages include MemoryOS, an open-source long-term memory library for LLMs and AI agents on PyPI, and the official memtensor/memos-cloud-openclaw-plugin for the OpenClaw runtime on npm. Attackers embedded a cross-platform Go binary that runs when the packages are loaded or imported. Affected releases are MemoryOS 2.0.34 and npm plugin versions 0.1.21, 0.1.23 and 0.1.25. The compromised npm plugin may expose user prompt data. SlowMist advised users to uninstall or downgrade to MemoryOS 2.0.33 or npm plugin 0.1.20, terminate the sckit process, block related infrastructure, inspect network activity and rotate credentials in affected environments.

The information on this website is generated using AI and we cannot guarantee its accuracy. Please use it as reference information only.
MemTensor AI memory tools compromised with cross-platform malware - CoinPost Terminal