MemTensor: When an AI Memory Plugin Becomes the Credential Collector

Poisoned MemTensor packages stole developer credentials through the agent's normal startup and memory recall paths.