PYSEC-2026-3987
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/MemoryOS/PYSEC-2026-3987.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-3987
- Aliases
- Published
- 2026-09-23T19:52:25Z
- Modified
- 2026-09-23T20:15:02Z
- Summary
- MemoryOS 2.0.34 was published with a credential-stealing binary
- Details
-
An attacker with write access to the GitHub repository pushed malicious commits and tagged v2.0.34, and the project's own GitHub Actions release workflow built and uploaded 2.0.34 to PyPI. Importing the package runs memos/_stage0.py, which launches a bundled sckit binary that collects credentials (.pypirc, .npmrc, .git-credentials, SSH keys, token-like environment variables) and sends them to *.skyleen[.]fr.
Remove 2.0.34 and rotate any credentials reachable from affected machines.
- wheel SHA256: 39ee644406829a4b630b31759c20478bc22d576d6a59b253ed86f72c360aa5ef
- sdist SHA256: 92b46d18fc553c494eda714f204459edb74c205bf53b18a9092bcf02c7a6c5be
- References
-
- https://safedep.io/memtensor-sckit-worm-npm-pypi/
- https://inspector.pypi.io/project/memoryos/2.0.34/packages/3e/9a/4d766a52dcabcbf440aa8f8f1eaf2adca041f93913271d8c342c20ae167c/memoryos-2.0.34.tar.gz//memoryos-2.0.34/src/memos/_stage0.py
- https://github.com/MemTensor/MemOS/commit/b52958fdc9cdb6c81be90123bcf65c42be35b5b5
- https://pypi.org/project/MemoryOS/
- Credits
-
-
- Kamil Mańkowski - REPORTER
-
- Mike Fiedler - COORDINATOR
-
Affected packages
PyPI / memoryos
Package
- Name
- memoryos
- View open source insights on deps.dev
- Purl
- pkg:pypi/memoryos