Slow Mist: MemoryOS and OpenClaw plug-ins are poisoned

PANews reported on September 24 that according to the SlowMist security warning, MemTensor’s AI memory tool chain was compromised. MemoryOS (PyPI), an open source long-term memory library for LLM and AI Agents, and memtensor/memos-cloud-openclaw-plugin (npm), an official plug-in to connect to the OpenClaw runtime, are embedded in the cross-platform Go binary. The malicious program triggers execution when the package is loaded or imported.

Affected versions include: MemoryOS==2.0.34 on PyPI, and npm plugins 0.1.21, 0.1.23, 0.1.25. Among them, the affected npm plug-in may also cause the user prompt content to be leaked.

SlowMist recommends the following measures: uninstall or downgrade to known safe versions (npm 0.1.20, PyPI 2.0.33); terminate the sckit process; block related infrastructure; check network activity; and rotate credentials in the affected environment.

Labarai masu alaƙa

Ci gaban ribar ƙungiyar Magnificent Seven na iya kasancewa baya ga sauran S&P 500 a karon farko tun ƙarshen 2022.

Shugaban Apple: Ba za mu kera kayayyaki don kawai AI ba.

Wani sabon adireshi da ya bi diddigin hauhawar farashi ya sayi ARB da alama ya kawar da matsayinsa, tare da kiyasin asarar dala 945,000.

Wanda ya kafa THORChain ya mayar da martani ga kiran FBI na toshe ma'amaloli: masu gudanarwa ba su da bayanan da ba na jama'a ba, kuma masu bincike na iya samun bayanai ba tare da sammacin kotu ba.

A week of tech stocks "facing reality" as giant companies' earnings reports falter one after another