🤖 Supply chain: two legitimate MemTensor packages on npm and PyPI were compromised to push "sckit", a Go-based credential stealer targeting Windows, Linux, and macOS. Reported by Aikido, SafeDep, Socket, StepSecurity.
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
🤖 Supply chain: two legitimate MemTensor packages on npm and PyPI were compromised to push "sckit", a Go-based credential stealer targeting Windows, Linux, and macOS. Reported by Aikido, SafeDep, Socket, StepSecurity. 🔗 https:// thehackernews.com/2026/09/comp romised-memtensor-packages-deliver.html # SupplyChain # Malware # InfoSec
Threat actors are leveraging compromised MemTensor packages on npm and PyPI to distribute 'sckit,' a multi-platform Go-based credential stealer, posing a significant data theft risk to Windows… Threat actors are leveraging compromised MemTensor packages on npm and PyPI to distribute 'sckit,' a multi-platform Go-based credential stealer, posing a significant data theft risk to Windows…