A supply chain campaign called TrapDoor has shipped 34 malicious packages targeting crypto and AI developers, draining wallets, SSH keys, and API tokens.
Read the full article: https://www.spendnode.io/blog/trapdoor-malware-34-packages-crypto-developers-may-2026/