TrapDoor supply-chain campaign targeted npm, PyPI, and Crates.io packages
A reported campaign called “TrapDoor” pushed malicious packages across npm, PyPI, and Crates.io, targeting developer environments for credentials like AWS keys, GitHub tokens, SSH keys, browser data, and crypto wallets.
📄
This source provides headlines only. Use the button below to read the complete article on the original site.
📰 Read the original article on r/programming
Originally published by r/programming. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.