Compromised Mem Tensor Packages Deliver sckit Credential Stealer via npm and PyPI
Summary: Unknown attackers compromised two legitimate MemTensor packages on npm and PyPI to deliver a Go-based implant called sckit for Windows, Linux, and macOS. The npm versions 0.1.21, 0.1.23, and 0.1.25 launch the payload when the agent gateway starts and on memory-recall events, while the PyPI package runs the binary as soon as the memos module is imported, with SafeDep reporting the attacker obtained publish tokens from MemTensor's GitHub Actions release pipelines.
What's compelling: The implant harvests npm, PyPI, GitHub, GitLab, AWS, Vault, and SSH secrets and exfiltrates them to skyleen[.]fr, and it carries templates to install itself in npm packages, Python packages, and GitHub Actions workflows, so a single compromised publish token can spread through the same pipelines your releases depend on.
Read the original at The Hacker News ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026