MemoryOS Project Compromised via Malicious PyPI Build Backend
Attackers hijacked the MemoryOS project by modifying the pyproject.toml file to intercept PyPI credentials and distribute a backdoored package.
Attackers compromised the MemoryOS project by modifying the build backend configuration in the pyproject.toml file. This let them intercept the PyPI authentication token before the standard upload process ran, bypassing original maintainers to publish a backdoored version of the library named memtensor-sckit-worm.
Watch out.
By replacing the legitimate build backend with a custom version, the malicious actors gained unauthorized access to the project's PyPI token and pushed the compromised code themselves. You must verify build backend integrity. When an attacker can execute code during the build process, they can exfiltrate credentials used for deployment steps.
This compromise demonstrates an approach to credential theft that targets how Python packages are built and distributed through PyPI, rather than relying on traditional typosquatting or simple dependency confusion. Developers using automated publishing pipelines need to ensure environment secrets stay protected from arbitrary execution during package creation. Audit configuration files strictly.