AI Has Taken over Open Source
The TrapDoor crypto stealer supply chain attack has infected 36 malicious packages across npm, PyPI, and Crates.io, targeting developers in crypto, DeFi, AI, and security fields.
Research
/
Security News
TrapDoor Crypto Stealer Supply Chain Attack Hits 34 Packages and Hundreds of Versions Across npm, PyPI, and Crates.io
TrapDoor crypto stealer hits 36 malicious packages across npm, PyPI, and Crates.io, targeting crypto, DeFi, AI, and security developers.
By Socket Research Team - May 24, 2026