[sckit]

September 24, 2026

• MemTensor packages compromised on both npm and PyPI to deliver a Go implant dubbed sckit with Windows, Linux and macOS builds, per reports from Aikido, SafeDep, Socket and StepSecurity (The Hacker News). · Supply Chain & CI/CD

in The Exploit Is Public, the Ubuntu Patch Isn't