Opening SecureFlowMemTensor sckit Payload in OpenClaw Memory Plugin Releases
Case summary & sources

AIDEFEND SecureFlow / SecureFlow Case Index

StepSecurity aidefend-sf0056

MemTensor sckit Payload in OpenClaw Memory Plugin Releases

  • Autonomous Agents
  • Credential & Identity Theft
  • Data Exfiltration

StepSecurity found unauthorized @memtensor/memos-cloud-openclaw-plugin 0.1.21, 0.1.23 and 0.1.25 releases carrying a bundled native sckit payload. The active launchStageZero path runs on gateway startup or memory recall; the recall call passes the current prompt and inherited process environment to a detached child. Package contents and launcher behavior are confirmed, while successful external exfiltration and autonomous worm propagation are not.

Mapped threat techniques

  • AML.T0010.001 AI Software
  • AML.T0050 Command and Scripting Interpreter

Source

Updated