Snyk Security Database

@memtensor/memos-cloud-openclaw-plugin is an OpenClaw lifecycle plugin for MemOS Cloud (add + recall memory)

Affected versions of this package are vulnerable to Embedded Malicious Code. Malicious versions of this package ship a credential-stealing dropper, published 23 September 2026. The payload does not run at install time, but upon invocation of the package. A language-specific loader then spawns a platform-specific binary from the package's .sckit directory, which holds variants including windows-amd64 and linux-arm64, with the JavaScript side calling spawn(binary, ['stage0', '--config64', CONFIG], { detached: true, stdio: 'ignore' }).

The binary matches secrets by regex and exfiltrates AWS access key IDs, GitHub tokens, npm access tokens, and PyPI API tokens, writing runtime state to $HOME/.openclaw/.cache/runtime, the path given in the state_dir field of its config blob. The stolen registry credentials drive onward propagation rather than being an end in themselves: direct publishing to npm and PyPI, injection of a GitHub Actions workflow that self-executes, injection of a postinstall script into bootstrap.cjs, and Python subprocess execution from compromised repositories.

Affected versions of this package are vulnerable to Embedded Malicious Code. Malicious versions of this package ship a credential-stealing dropper, published 23 September 2026. The payload does not run at install time, but upon invocation of the package. A language-specific loader then spawns a platform-specific binary from the package's .sckit directory, which holds variants including windows-amd64 and linux-arm64, with the JavaScript side calling spawn(binary, ['stage0', '--config64', CONFIG], { detached: true, stdio: 'ignore' }).

The binary matches secrets by regex and exfiltrates AWS access key IDs, GitHub tokens, npm access tokens, and PyPI API tokens, writing runtime state to $HOME/.openclaw/.cache/runtime, the path given in the state_dir field of its config blob. The stolen registry credentials drive onward propagation rather than being an end in themselves: direct publishing to npm and PyPI, injection of a GitHub Actions workflow that self-executes, injection of a postinstall script into bootstrap.cjs, and Python subprocess execution from compromised repositories.

org.codehaus.jackson:jackson-mapper-asl is a high-performance data binding package built on Jackson JSON processor.

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the _findDeserializer() method of TypeDeserializerBase, which caches every unknown type ID as a distinct key in the _deserializers map even when all of them resolve to the same defaultImpl fallback. An attacker can grow that cache without bound for the lifetime of the process, exhausting memory over time, by submitting a stream of novel type identifiers. This requires the application to use name-based polymorphism through @JsonTypeInfo(use = Id.NAME, defaultImpl = ...), to accept attacker-controlled type identifiers, and to reuse the mapper instance across requests.