advisory-catalog: memtensor-2026-09-23

threat_intel/README.md

@@ -12,6 +12,7 @@ the entries against current advisories before production use.
 
 | File | Campaign | Source |
 |---|---|---|
+| [`memtensor-2026-09-23.json`](memtensor-2026-09-23.json) | MemTensor npm and PyPI credential-stealer compromise (2 packages / 4 malicious versions) | [Socket, 2026-09-23](https://socket.dev/blog/memtensor-compromise) |
 | [`mastra-2026-06-17.json`](mastra-2026-06-17.json) | Mastra npm supply-chain compromise (141 packages / 141 versions across `@mastra/*` plus `create-mastra` and the `easy-day-js@1.11.22` typosquat dependency that delivered a cross-platform infostealer via postinstall) | [Socket, 2026-06-17](https://socket.dev/blog/mastra-npm-packages-compromised) |
 | [`mini-shai-hulud-leoplatform-2026-06-24.json`](mini-shai-hulud-leoplatform-2026-06-24.json) | Mini Shai-Hulud / Miasma (Hades variant) LeoPlatform/RStreams wave (compromised `czirker` npm account; 26 npm packages + 1 Go module / 27 versions; "Phantom Gyp" `binding.gyp` install hook, Bun-staged infostealer, "Alright Lets See If This Works" dead-drop marker) | [Socket, 2026-06-24](https://socket.dev/blog/miasma-mini-shai-hulud-hits-leoplatform-npm-packages-go-ecosystem); [OX Security, 2026-06-24](https://www.ox.security/blog/alright-lets-see-if-this-works-shai-hulud-miasma-hades-variant-spreads-on-npm/) |
 | [`mini-shai-hulud.json`](mini-shai-hulud.json) | Mini/Shai-Hulud May 2026 npm and PyPI compromise (OX Security affected-package table) | Cross-checked against Fleet, Socket, Snyk, Mistral, TanStack, The Hacker News |

threat_intel/memtensor-2026-09-23.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": "0.2.0",
+  "_comment": "Malicious MemTensor releases published on 2026-09-23 across npm and PyPI. Socket identified three compromised @memtensor/memos-cloud-openclaw-plugin versions and one compromised MemoryOS version, all carrying a cross-platform credential stealer. The npm versions were subsequently yanked: the npm packument retains their publication timestamps but no longer exposes tarball metadata; OSV MAL-2026-16476 and GHSA-mhjf-v53x-7p87 retain all three affected versions. The PyPI release was also removed from the registry; deps.dev retains its 2026-09-23T05:25:22Z publication timestamp and OSV MAL-2026-16475 retains the affected version.",
+  "entries": [
+    {
+      "id": "socket-2026-09-23-npm-memtensor-memos-cloud-openclaw-plugin",
+      "name": "@memtensor/memos-cloud-openclaw-plugin (MemTensor credential-stealer compromise)",
+      "ecosystem": "npm",
+      "package": "@memtensor/memos-cloud-openclaw-plugin",
+      "versions": [
+        "0.1.21",
+        "0.1.23",
+        "0.1.25"
+      ],
+      "severity": "critical",
+      "source": "https://socket.dev/blog/memtensor-compromise",
+      "references": [
+        "https://osv.dev/vulnerability/MAL-2026-16476",
+        "https://github.com/advisories/GHSA-mhjf-v53x-7p87"
+      ]
+    },
+    {
+      "id": "socket-2026-09-23-pypi-memoryos",
+      "name": "MemoryOS (MemTensor credential-stealer compromise)",
+      "ecosystem": "pypi",
+      "package": "MemoryOS",
+      "versions": [
+        "2.0.34"
+      ],
+      "severity": "critical",
+      "source": "https://socket.dev/blog/memtensor-compromise",
+      "references": [
+        "https://osv.dev/vulnerability/MAL-2026-16475",
+        "https://api.deps.dev/v3/systems/PYPI/packages/MemoryOS/versions/2.0.34"
+      ]
+    }
+  ]
+}