MemoryOS 2.0.34 was published with a credential-stealing binary

An attacker with write access to the GitHub repository pushed maliciouscommits and tagged v2.0.34, and the project's own GitHub Actions releaseworkflow built and uploaded 2.0.34 to PyPI.Importing the package runs memos/stage0.py, which launchesa bundled sckit binary that collects...

PYSEC-2026-3987 MemoryOS 2.0.34 was published with a credential-stealing binary

An attacker with write access to the GitHub repository pushed malicious commits and tagged v2.0.34, and the project's own GitHub Actions release workflow built and uploaded 2.0.34 to PyPI. Importing the package runs memos/stage0.py, which launches a bundled sckit binary that collects credentials...

Malicious code in memoryos (PyPI)

Source: kam193 d17530b4f32046961be6354a73139dafa5a7d73ca9f7226dcf6bb3a3510bde20 Versions 2.0.34 were compromised. The package was compromised and contains a malicious executable. First discovered by Safedep. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MSC-2026-11646

Two packages from the MemTensor ecosystem were compromised and republished with malicious code: npm @memtensor/memos-cloud-openclaw-plugin versions 0.1.21, 0.1.23 and 0.1.25, and PyPI MemoryOS 2.0.34. The malicious versions ship prebuilt native binaries for Windows, Linux and macOS that the packa...

Malicious code in memoryos (PyPI)

On September 23, 2026, an attacker published malicious versions of two MemTensor packages. The affected packages are the OpenClaw plugin @memtensor/memos-cloud-openclaw-plugin on npm and the MemOS Python library MemoryOS on PyPI. Both versions contain the same Go implant, sckit. The binary runs i...

MAL-2026-16475 Malicious code in memoryos (PyPI)

On September 23, 2026, an attacker published malicious versions of two MemTensor packages. The affected packages are the OpenClaw plugin @memtensor/memos-cloud-openclaw-plugin on npm and the MemOS Python library MemoryOS on PyPI. Both versions contain the same Go implant, sckit. The binary runs i...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Malicious versions of this package ship a credential-stealing dropper, published 23 September 2026. The payload does not run at install time, but upon invocation of the package. A language-specific loader then...