Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index PyPI repositories to push a platformspecific Gobased implant dubbed sckit designed for Windows Linux and macOS According to reports from Aikido SafeDep Socket and StepSecurity the libraries in question below memtensormemoscloudopenclawplugin versions