MikeTrendsTrends right now
AI: reposAPI

search

OpenClaw

Trends

  1. 1
    PyPI package MemoryOS accused of hiding credential stealer●"import memos" alone is enough to start a credential stealer. MemoryOS 2.0.34 on PyPI: 149 modules call get_logger() atMmastodonTechnologyCybersecurity16 h ago

    Security researchers report that the Python package MemoryOS, version 2.0.34 on PyPI, is trojanized: simply importing the 'memos' module is said to trigger malicious code. Of the package's modules, 149 reportedly call get_logger() at import time, and a modified logger allegedly launches a Go binary, 'sckit', that harvests .npmrc files, Vault tokens, SSH keys and environment secrets. The npm OpenClaw plugin is also named in the report.

Repos