Two packages from the MemTensor ecosystem were compromised and republished with malicious code: npm @memtensor/memos-cloud-openclaw-plugin versions 0.1.21, 0.1.23 and 0.1.25, and PyPI MemoryOS 2.0.34. The malicious versions ship prebuilt native binaries for Windows, Linux and macOS that the package launches as a detached background process to harvest developer and cloud credentials and to spread through stolen npm, PyPI and CI credentials.