Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Unknown threat actors have compromised two legitimate MemTensor packages on npm and PyPI, using them to distribute a Go-based implant called sckit. The sckit implant is designed to work on multiple platforms, including Windows, Linux, and macOS. The compromise was reported by several security companies, including Aikido, SafeDep, Socket, and StepSecurity. The affected packages include a specific version of the @memtensor/memos-cloud-openclaw-plugin. The sckit implant is a credential stealer.