---
id: 8786
title: "Novel supplychain.local Go worm appears"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/supplychain-local-memtensor-npm-pypi"
published_at: "2026-09-23T00:00:00Z"
tags: ["supply-chain", "malware", "aikido", "go", "worm"]
phying_url: "https://phying.com/item/8786"
lang: en
---

# Novel supplychain.local Go worm appears

## Summary

On 23 September 2026, a threat actor published a novel supply chain worm to the following packages:

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2026-09-23T00:00:00Z
- **Original:** https://www.aikido.dev/blog/supplychain-local-memtensor-npm-pypi
- **Phying News:** https://phying.com/item/8786