#TrapDoor

May 29, 2026

TrapDoor Malware Hits npm, PyPI and Crates.io in Crypto Supply Chain Attack

Daily Feed

TrapDoor is a supply chain attack that hid malware inside open-source packages used by crypto, blockchain, and AI developers across npm, PyPI, and Crates.io. The goal was ugly and familiar: steal wallet keys, cloud credentials, GitHub tokens, SSH keys, and anything else that could unlock money or infrastructure. 34+ malicious packages spread across npm, PyPI, […]

#Crypto Developers #Open Source Packages #Supply Chain Attack #TrapDoor

Read Full Article

May 26, 2026

TrapDoor Malware Hits Crypto Devs via npm, PyPI and AI Assistant Tricks

Daily Feed

TrapDoor is a supply-chain malware campaign targeting crypto developers through the software packages they trust most, and it’s doing it with a nasty twist: hidden instructions aimed at AI coding assistants like Claude and Cursor. TrapDoor targeted crypto, DeFi, AI, and security developers Spread through npm, PyPI, and Crates Used fake utility packages to hunt […]

#Crypto Developers #TrapDoor #AI Coding Assistants #Supply-Chain Malware

Read Full Article