#ParsedReport #CompletenessMedium
23-09-2026

MemTensor npm and PyPI Packages Hit by a Go Worm

https://safedep.io/memtensor-sckit-worm-npm-pypi

Report completeness: Medium

Threats:
Sckit_tool
Supply_chain_technique

Victims:
Memtensor, Openclaw plugin, Memoryos, Software development supply chain

TTPs:
Tactics: 2
Technics: 0

ChatGPT TTPs:
do not use without manual check
T1027, T1041, T1059.004, T1059.006, T1059.007, T1070.004, T1071.001, T1083, T1105, T1124, have more...

IOCs:
Domain: 8
File: 15
Email: 2
Hash: 18
Url: 1

Soft:
MemTensor, OpenClaw, Linux, Node.js

Algorithms:
xchacha20-poly1305, ed25519, curve25519, base64, xchacha20

Functions:
collectStageZero, register, launchStageZero, HTTPS, configure_logging, trigger, readCredentialFile, findRepositories, deleteExecutable

Languages:
cpython, python

Platforms:
intel

Links:
https://github.com/MemTensor/MemOS
https://github.com/MemTensor/MemOS-Cloud-OpenClaw-Plugin/issues/173
have more...