Slow Mist: MemoryOS and OpenClaw plug-ins are poisoned

PANews reported on September 24 that according to the SlowMist security warning, MemTensor’s AI memory tool chain was compromised. MemoryOS (PyPI), an open source long-term memory library for LLM and AI Agents, and memtensor/memos-cloud-openclaw-plugin (npm), an official plug-in to connect to the OpenClaw runtime, are embedded in the cross-platform Go binary. The malicious program triggers execution when the package is loaded or imported.

Affected versions include: MemoryOS==2.0.34 on PyPI, and npm plugins 0.1.21, 0.1.23, 0.1.25. Among them, the affected npm plug-in may also cause the user prompt content to be leaked.

SlowMist recommends the following measures: uninstall or downgrade to known safe versions (npm 0.1.20, PyPI 2.0.33); terminate the sckit process; block related infrastructure; check network activity; and rotate credentials in the affected environment.

Labarai masu alaƙa

11-02 02:05 UTC
Musk: Kudin gudanar da aikin Grok Bot ya yi tsada sosai ba tare da dorewa ba idan aka kwatanta da kudaden shigarsa.
PANews, Nuwamba 2 labari: Dangane da tambayar da wani mai amfani ya yi a dandalin X game da saurin ƙarewar adadin amfani da Grok Bot, Musk ya bayyana cewa kuɗin...
11-02 01:44 UTC
Bankin China Merchants da wasu cibiyoyi da dama sun ƙaddamar da sabis ɗin buga bayanin ma'amalar walat a cikin App ɗin renminbi na dijital.
11-02 01:41 UTC
Wanda ya kafa POAP na iya yin rijista da ETH 100,000 a lokacin ICO na 2015.
11-02 01:01 UTC
UBTECH ta fitar da dandalin kwaikwayon basirar jiki na Thinker-Sim.
11-02 00:55 UTC
Lokacin neman lasisin mai ba da sabis na kadarorin kama-da-wane a Brazil ya ƙare, inda kusan kamfanoni 40 ne kawai suka gabatar da buƙatun.

Musk: Kudin gudanar da aikin Grok Bot ya yi tsada sosai ba tare da dorewa ba idan aka kwatanta da kudaden shigarsa.

Bankin China Merchants da wasu cibiyoyi da dama sun ƙaddamar da sabis ɗin buga bayanin ma'amalar walat a cikin App ɗin renminbi na dijital.

Wanda ya kafa POAP na iya yin rijista da ETH 100,000 a lokacin ICO na 2015.

UBTECH ta fitar da dandalin kwaikwayon basirar jiki na Thinker-Sim.

Lokacin neman lasisin mai ba da sabis na kadarorin kama-da-wane a Brazil ya ƙare, inda kusan kamfanoni 40 ne kawai suka gabatar da buƙatun.