Khoury College of Computer Sciences
CS 4550 / CS 5610 · Web Development · Fall 2026
MemTensor npm/PyPI packages shipped a supplychain.local Go worm
- Security
- Course
Instructor-curated digest, not original reporting. Each post paraphrases a public article and links to the original source.
On September 23, 2026, updated September 24, Oliver Smith at Aikido reported compromised packages that already had a benign history: npm @memtensor/memos-cloud-openclaw-plugin versions >=0.1.21 and PyPI MemoryOS >=2.0.34. The worm, tracked as supplychain.local, ships multiplatform Golang sckit binaries launched by language-native loaders when the package is used, not through install-time scripts.
Droppers spawn the platform binary with stage0 --config64 and a base64 config pointing at skyleen.fr C2 fronts. It is designed to self-propagate through stolen publish credentials (npm publish and twine) and GitHub Actions templates, and it hunts for GitHub, GitLab, npm, PyPI, AWS, Vault, Slack, and other secrets. Check lockfiles and installs for those versions, and treat runtime package-use paths as the risk, not only install hooks.
That package hygiene is the same Node dependency work as Chapter 5, on the full-stack stack you meet in Chapter 1.
Read original: Novel supplychain.local Go worm appears — Aikido