Two MemTensor packages on npm and PyPI were replaced with backdoored versions carrying the sckit credential-stealing worm between 02:23 and 05:55 UTC on September 23, according to SafeDep's analysis, …
A developer benchmarked six deduplication-and-update strategies for agent long-term memory systems, testing mem0 2.0.7, MemOS and signetai on the open-source NeatMem project. In a reproduction using O…
Researchers at Semgrep documented a supply-chain attack in which the sckit worm was embedded in legitimate MemTensor MemOS npm and PyPI packages, activating not at install time but when the affected P…
Malicious versions of MemTensor's MemOS memory framework for LLMs and AI agents appeared on npm and PyPI between 02:23 UTC and 05:55 UTC on September 23, 2026, carrying a cross-platform Go credential …
A threat actor published four malicious releases of MemTensor's MemOS packages on September 23, 2026, compromising npm package @memtensor/memos-cloud-openclaw-plugin (versions 0.1.21, 0.1.23 and 0.1.2…
A threat actor published malicious releases of MemTensor's MemOS AI memory framework on September 23, 2026, compromising npm packages @memtensor/memos-cloud-openclaw-plugin versions 0.1.21, 0.1.23 and…
A developer who built the Muninn memory system with an AI partner missed the submission window for the Agent Memory Leaderboard, so they ran the benchmark's public pipeline themselves and reported an …