Malicious versions of the npm package @memtensor/memos-cloud-openclaw-plugin published on September 23, 2026, contain a Go implant named sckit that runs automatically when the package loads. This implant collects various credential files from the user's home directory and exfiltrates them to attacker-controlled servers. It also has self-propagation capabilities to spread to other repositories and packages accessible with stolen credentials. The implant uses encrypted communication channels and deletes itself after execution. The affected versions are 0.1.21, 0.1.23, and 0.1.25.