highMalware
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Malicious Go-based implant targets Windows, Linux, and macOS users through supply chain attack on legitimate machine learning packages
CyberIntel Desk1 min read
Key Takeaways
- Threat actors compromised legitimate MemTensor packages on npm and PyPI to distribute a Go-based implant named 'sckit'
- The malware targets Windows, Linux, and macOS operating systems and functions as a credential stealer
- The attack leverages supply chain compromise of trusted package names in the machine learning/AI space
Related Security News
highCyber Attacks
Star Blizzard Campaign Targets 100+ Organizations with Fake Event Invitations
Microsoft reports that the Russian state-sponsored threat actor Star Blizzard has been conducting a sustained campaign since January 2026, using fake event invitations to trick targets into installing a backdoor on Windows computers. The operation has affected more than 100 organizations, primarily in the U.S. and U.K., with victims tied to Ukraine. At least one infection has been confirmed, though the full extent of breaches and data exfiltration remains unverified.
The Hacker News1 min read
