sckit PyPI CI emitter download from 10729e014d0e.skyleen.fr

Ibrahim Saud@tektrix

•updated Sep 23, 2026•0•0•3

Detects network communication with 10729e014d0e.skyleen.fr, associated with the SCKIT malware downloading binaries during CI/CD emitter activities. This rule flags potential ingress tool transfers as part of a supply chain compromise campaign identified as 'memos-semi-nuclear'.