TrapDoor’s credential theft campaign hits Solana developers via 384+ versions
TrapDoor, a credential theft campaign, has spread more than 384 malicious package versions across npm, PyPI and Crates.io, targeting Solana developers. SlowMist and Coinfomania reports cite the same total, and more than 34 packages target crypto and DeFi developers. Developers using these registries should audit dependencies and rotate credentials.