09:16
2026-09-23
socket.dev
ai-safety
MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack
A threat actor published four malicious releases of MemTensor's MemOS packages on September 23, 2026, compromising npm package @memtensor/memos-cloud-openclaw-plugin (versions 0.1.21, 0.1.23 and 0.1.2…