Compromised MemTensor npm and PyPI packages deliver sckit, a Go-based stealer targeting cloud, registry, source-code, and developer credentials.
On Sep 23, 2026, security researchers reported that unknown threat actors compromised two legitimate MemTensor packages on ...