Malicious npm and PyPI releases for MemTensor and MemoryOS dropped a Go payload that hunts developer secrets in home dirs and exfiltrates tokens from GitHub, AWS, SSH, Vault, and PyPI. #MemTensor #MemoryOS #France