SlowMist: MemoryOS and OpenClaw Plugin Compromised

PANews reported on September 24 that, according to a SlowMist security alert, MemTensor's AI memory toolchain has been compromised. The open-source long-term memory library MemoryOS (PyPI) for LLMs and AI Agents, as well as the official plugin memtensor/memos-cloud-openclaw-plugin (npm) connecting to the OpenClaw runtime, have been injected with a cross-platform Go binary that triggers execution when the package is loaded or imported.

Affected versions include MemoryOS==2.0.34 on PyPI and npm plugin versions 0.1.21, 0.1.23, and 0.1.25. The affected npm plugin may also cause user prompt content leakage.

SlowMist recommends the following remediation measures: uninstall or downgrade to known-safe versions (npm 0.1.20, PyPI 2.0.33); terminate the sckit process; block related infrastructure; inspect network activity; and rotate credentials in affected environments.