Slow Mist: MemoryOS and OpenClaw plug-ins are poisoned

PANews reported on September 24 that according to the SlowMist security warning, MemTensor’s AI memory tool chain was compromised. MemoryOS (PyPI), an open source long-term memory library for LLM and AI Agents, and memtensor/memos-cloud-openclaw-plugin (npm), an official plug-in to connect to the OpenClaw runtime, are embedded in the cross-platform Go binary. The malicious program triggers execution when the package is loaded or imported.

Affected versions include: MemoryOS==2.0.34 on PyPI, and npm plugins 0.1.21, 0.1.23, 0.1.25. Among them, the affected npm plug-in may also cause the user prompt content to be leaked.

SlowMist recommends the following measures: uninstall or downgrade to known safe versions (npm 0.1.20, PyPI 2.0.33); terminate the sckit process; block related infrastructure; check network activity; and rotate credentials in the affected environment.

Habari zinazohusiana

Analyst: The total amount of funds stolen by the Lazarus Group reached $11.87 billion, equivalent to 45% of North Korea's GDP in 2025.

Machi sold BAYC #950 and BAYC #5310 through an over-the-counter transaction.

Mchambuzi: Ugavi wa wamiliki wa BTC wa muda mfupi unakadiriwa upya, huku unyonyaji ukionekana katika kiwango cha $75,000-$78,000.

Benki kuu itafanya kongamano kuhusu mikopo ya upya kwa ajili ya ununuzi wa hisa na kuongeza umiliki.

Amerika Kaskazini imeanza kuzingatia muda wa kawaida, na muda wa kufungua soko la hisa la Marekani umerekebishwa kuwa 22:30.