Research
/Security News
MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.
By Karlo Zanki - Sep 23, 2026
