On September 23, 2026, malicious versions 0.1.21, 0.1.23, and 0.1.25 of the npm package @memtensor/memos-cloud-openclaw-plugin were published containing a Go-compiled implant called sckit. This implant is bundled as a native binary for multiple OS/architecture targets and is automatically executed in the background upon package load. It collects credentials from files such as .npmrc, .pypirc, .git-credentials, SSH private keys, Vault tokens, and various token caches within the user's home directory. The implant exfiltrates stolen credentials to servers under skyleen.fr using an encrypted protocol involving CBOR, X25519 key exchange, and XChaCha20-Poly1305 encryption. It also includes functionality to copy itself into other repositories and packages accessible with the stolen credentials. The implant deletes its binary after execution to evade detection. The package's JavaScript source obfuscates the command and control server addresses and uses a configuration naming the campaign 'cloud-openclaw-semi-nuclear'. This is a credential theft and host compromise targeting users who install the package, not a typical plugin functionality.

Any system that installs or runs the affected versions of @memtensor/memos-cloud-openclaw-plugin is fully compromised. The implant steals a wide range of credentials and tokens from the user's home directory, potentially exposing npm publishing tokens, SSH keys, Vault tokens, and other sensitive secrets. These credentials are sent to attacker-controlled servers, enabling further compromise and lateral movement. The implant can propagate itself to other repositories and packages accessible with stolen credentials, increasing the scope of compromise. Because the implant runs automatically on package load and deletes itself after execution, detection and remediation are challenging. The compromise affects the integrity and confidentiality of the affected systems and any credentials stored on them.

No official patch or fix is currently documented. Immediate removal of the affected package versions (0.1.21, 0.1.23, 0.1.25) is necessary. All credentials and secrets stored on the compromised system should be considered exposed and must be rotated immediately from a secure, uncompromised environment. Due to the implant's ability to propagate and persist, a full system compromise should be assumed, and affected systems should be thoroughly audited and potentially rebuilt. Monitoring for unusual network traffic to the specified skyleen.fr domains and related UUID paths may assist in detection. Users should avoid installing or using these malicious package versions.