2026年9月23日 9:52 ET 发布 · 更新于 2 个月前 · 1 个来源
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
The Hacker News
·
原始报道
Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According to reports from Aikido, SafeDep, Socket, and StepSecurity, the libraries in question below - @memtensor/memos-cloud-openclaw-plugin versions
原文