TrapDoor Crypto Stealer Supply Chain Attack Hits 34 Packages and Hundreds of Versions Across npm, PyPI, and Crates.io (opens in new tab)

Covers 2 stories including So, it happened to me - catastrophic errorCovered by 8 sources including This Week In 4n6, msuiche.comDiscussed on Hacker News and DEV

TrapDoor crypto stealer hits 36 malicious packages across npm, PyPI, and Crates.io, targeting crypto, DeFi, AI, and security developers.

Read the original article

Sign in to keep reading the full article.

Covered in 8 articles

This Week In 4n6·

Week 22

Supply-Chain Attacks Cluster: 230,000 Advisories, Five Patterns

Discussed on Hacker News

thehackernews.com·

TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO