{"id":3101,"date":"2026-09-23T14:31:38","date_gmt":"2026-09-23T14:31:38","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=3101"},"modified":"2026-09-23T14:31:38","modified_gmt":"2026-09-23T14:31:38","slug":"compromised-memtensor-packages-deliver-sckit-credential-stealer-via-npm-and-pypi","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=3101","title":{"rendered":"Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>Sep 23, 2026<\/span><\/span>Malware \/ Cloud Security<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit<\/strong> designed for Windows, Linux, and macOS.<\/p>\n

According to reports from Aikido<\/a>, SafeDep<\/a>, Socket<\/a>, and StepSecurity<\/a>, the libraries in question below –<\/p>\n

The malicious npm package versions include a \u00abhidden Go payload into a legitimate AI memory integration. Versions 0.1.21, 0.1.23, and 0.1.25 contain code that launches the payload when the agent gateway starts and whenever the plugin handles a memory-recall event,\u00bb StepSecurity said.<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

\u00abThe launcher passes the host process environment and, during recall, the user’s prompt text directly to the malicious executable.\u00bb<\/p>\n

<\/p>\n

The PyPI package, on the other hand, starts the statically-linked Go binary as soon as the \u00abmemos\u00bb module is imported into an application.<\/p>\n

Regardless of the ecosystem targeted, the end goal is to launch a cross-platform credential-stealing payload capable of harvesting sensitive data from cloud services, source-code platforms, package registries, and developer tools and exfiltrating the details to an external server (\u00abskyleen[.]fr\u00bb).<\/p>\n

According to Socket, targets include npm, PyPI, GitHub, GitLab, AWS, Vault and SSH secrets –<\/p>\n