TrapDoor Malware Hits npm, PyPI and Crates.io in Crypto Supply Chain Attack
TrapDoor is a supply chain attack that hid malware inside open-source packages used by crypto, blockchain, and AI developers across npm, PyPI, and Crates.io. The goal was ugly and familiar: steal wallet keys, cloud credentials, GitHub tokens, SSH keys, and anything else that could unlock money or infrastructure. 34+ malicious packages spread across npm, PyPI, […]
Read Full Article