MemTensor AI Memory Tools supply chain attacked; developer credentials at risk

iconTechFlow
Share
This is the logo of the coin.
BTC
$74,920.50-1.05%
This is the logo of the coin.
ETH
$2,130.45-4.23%
AI summary iconSummary
Blockchain security firm SlowMist reported a supply chain attack targeting MemTensor’s AI memory tools, including MemoryOS (PyPI) and OpenClaw (npm). The malicious code, embedded in Go binaries, steals developer tooling credentials and on-chain data, including npm/PyPI tokens, GitHub/GitLab keys, and AWS credentials. Attackers transmit stolen data to skyleen[.]fr. Users are advised to downgrade to secure versions, block the malicious domain, and rotate credentials. Affected versions include MemoryOS==2.0.34 and OpenClaw 0.1.21, 0.1.23, and 0.1.25.

According to monitoring by blockchain security firm SlowMist (@SlowMist_Team), MemTensor’s AI memory tool library MemoryOS (PyPI) and its OpenClaw plugin (npm) have been subjected to a supply chain attack. The compromised versions contain a cross-platform Go binary that automatically executes malicious code when the package is loaded or imported. Affected versions include MemoryOS==2.0.34 on PyPI and plugin versions 0.1.21, 0.1.23, and 0.1.25 on npm. Attackers can exploit this to steal sensitive information such as npm/PyPI tokens, GitHub/GitLab credentials, AWS keys, SSH keys, API tokens, and environment variables, which are exfiltrated to the attacker-controlled infrastructure skyleen[.]fr. The affected npm plugin may also expose user prompt content. SlowMist recommends that users immediately downgrade the affected packages to secure versions (npm to 0.1.20 and PyPI to 2.0.33), terminate any sckit-related processes, block the malicious infrastructure, review network activity, and rotate all credentials in affected environments.

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.