MemTensor NPM and PyPI packages compromised with credential stealer | Hacker News - But Better

MemTensor NPM and PyPI packages compromised with credential stealer socket.dev

The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are…

2 points•joshcsimmons•7 days ago•0 comments•

#npm #pypi #memtensor #stealer #credential #compromised #packages #memtensor npm

0 comments

No comments yet.

Related stories

Fake Express Packages on npm Spread a Linux Wormsafedep.io
Lobsters · 2 points · about 24 hours ago
DirtyBlanket: Fake Express Packages on NPM Spread a Linux Wormsafedep.io
Hacker News · 1 points · 1 day ago
DirtyBlanket: Fake Express Packages on NPM Spread a Linux Wormsafedep.io
Hacker News · 1 points · 1 day ago
Keyv and friends compromised in npm supply chain attackaikido.dev
Lobsters · 5 points · about 2 months ago
Malicious NPM packages evade install-script defenses at runtimebleepingcomputer.com
Hacker News · 2 points · 10 days ago
Show HN: An OSS Python dependency scanner for exploited, unmaintained packagesgithub.com
Hacker News · 3 points · 12 days ago