A coordinated malware campaign known as TrapDoor has hit software ecosystems widely used by crypto and blockchain developers.
TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.