Slow Mist: MemoryOS and OpenClaw plug-ins are poisoned

PANews reported on September 24 that according to the SlowMist security warning, MemTensor’s AI memory tool chain was compromised. MemoryOS (PyPI), an open source long-term memory library for LLM and AI Agents, and memtensor/memos-cloud-openclaw-plugin (npm), an official plug-in to connect to the OpenClaw runtime, are embedded in the cross-platform Go binary. The malicious program triggers execution when the package is loaded or imported.

Affected versions include: MemoryOS==2.0.34 on PyPI, and npm plugins 0.1.21, 0.1.23, 0.1.25. Among them, the affected npm plug-in may also cause the user prompt content to be leaked.

SlowMist recommends the following measures: uninstall or downgrade to known safe versions (npm 0.1.20, PyPI 2.0.33); terminate the sckit process; block related infrastructure; check network activity; and rotate credentials in the affected environment.

Habari zinazohusiana

11-02 02:05 UTC
Musk: Gharama ya uendeshaji ya Grok Bot ni kubwa isivyoweza kudumishwa ikilinganishwa na mapato yake.
PANews, habari za Novemba 2: Kujibu swali la mtumiaji kwenye jukwaa la X kuhusu kuisha kwa haraka kwa viwango vya matumizi ya Grok Bot, Musk alisema kuwa gharam...
11-02 01:44 UTC
Benki ya China Merchants na taasisi nyingine kadhaa zimezindua huduma za uchapishaji wa taarifa za miamala ya pochi ndani ya Programu ya renminbi ya kidijitali.
11-02 01:41 UTC
Mwanzilishi wa POAP anaweza kuwa alijiandikisha kwa ETH 100,000 wakati wa ICO ya 2015.
11-02 01:01 UTC
UBTECH yatoa jukwaa la uigaji wa akili iliyowekwa mwilini Thinker-Sim.
11-02 00:55 UTC
Kipindi cha maombi ya leseni za watoa huduma za mali pepe nchini Brazil kimekamilika, huku kampuni takriban 40 pekee zikiwasilisha maombi.

Musk: Gharama ya uendeshaji ya Grok Bot ni kubwa isivyoweza kudumishwa ikilinganishwa na mapato yake.

Benki ya China Merchants na taasisi nyingine kadhaa zimezindua huduma za uchapishaji wa taarifa za miamala ya pochi ndani ya Programu ya renminbi ya kidijitali.

Mwanzilishi wa POAP anaweza kuwa alijiandikisha kwa ETH 100,000 wakati wa ICO ya 2015.

UBTECH yatoa jukwaa la uigaji wa akili iliyowekwa mwilini Thinker-Sim.

Kipindi cha maombi ya leseni za watoa huduma za mali pepe nchini Brazil kimekamilika, huku kampuni takriban 40 pekee zikiwasilisha maombi.