Sckit Supply Chain Worm Targets MemTensor AI Packages

On September 23, 2026, a sophisticated supply chain attack targeted the MemTensor AI memory framework, affecting the npm package `@memtensor/memos-cloud-openclaw-plugin` and the PyPI package `MemoryOS`. The compromise involved re-publishing multiple versions of these packages containing a hidden Go-based implant dubbed 'sckit'. The malware is cross-platform, targeting Windows, Linux, and macOS, and is designed to run in the background upon package import or gateway startup.

The technical execution indicates the attackers gained access to MemTensor’s GitHub Actions release pipelines, likely through stolen tokens, and modified CI/CD configurations to capture publishing secrets. The 'sckit' binary functions as a worm, containing logic to scan for sensitive credentials (AWS, GitHub, npm, PyPI, Slack, etc.) and automate its own proliferation by injecting malicious code into other repositories and publishing workflows. This attack highlights the increasing threat to AI development ecosystems and the critical need for hardened CI/CD security and secret rotation.