Slow Mist: MemoryOS and OpenClaw plug-ins are poisoned

PANews reported on September 24 that according to the SlowMist security warning, MemTensor’s AI memory tool chain was compromised. MemoryOS (PyPI), an open source long-term memory library for LLM and AI Agents, and memtensor/memos-cloud-openclaw-plugin (npm), an official plug-in to connect to the OpenClaw runtime, are embedded in the cross-platform Go binary. The malicious program triggers execution when the package is loaded or imported.

Affected versions include: MemoryOS==2.0.34 on PyPI, and npm plugins 0.1.21, 0.1.23, 0.1.25. Among them, the affected npm plug-in may also cause the user prompt content to be leaked.

SlowMist recommends the following measures: uninstall or downgrade to known safe versions (npm 0.1.20, PyPI 2.0.33); terminate the sckit process; block related infrastructure; check network activity; and rotate credentials in the affected environment.