Published • loading... • Updated
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a…
Read more →
This story is only covered by news sources that have yet to be evaluated by the independent media monitoring agencies we use to assess the quality and reliability of news outlets on our platform. Learn more here.4 Articles
4 Articles
MemTensor Packages Hit by sckit Credential Stealer
Compromised MemTensor npm and PyPI packages distributed the sckit credential stealer, putting developer machines, CI environments and cloud credentials at risk. #software, #technology, #cybersecurity, #softwaresecurity, #supplychainsecurity, #npm, #pypi, #memtensor, #flyingeze
The Hacker NewsReposted by 
IT Security News - cybersecurity, infosecurity news
IT Security News - cybersecurity, infosecurity newsCompromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According to reports from Aikido, SafeDep, Socket, and StepSecurity, the libraries in question below @memtensor/memos-cloud-openclaw-plugin versions
Coverage Details
Total News Sources4
Leaning Left0Leaning Right0Center0Last UpdatedBias DistributionNo sources with tracked biases.
Bias Distribution
- There is no tracked Bias information for the sources covering this story.
Factuality
To view factuality data please Upgrade to Premium
