TrapDoor Malware Targets Crypto Developers Across Aptos, Sui And Solana

TrapDoor malware campaign puts developer workstations in CISO spotlight

A malicious package campaign across npm, PyPI, and Crates.io has put developer workstations back under scrutiny, after researchers said it targeted developer workflows and AI coding assistant files. Researchers at Socket said the campaign, which they are tracking as TrapDoor, “spans more than 34 malicious packages and 384+ related versions and artifacts” across the three open-source ecosystems. The packages were designed to steal developer secre…

TrapDoor Malware Targets Crypto Developer Tools

Developer platform Socket says a malware called TrapDoor is targeting crypto and AI developers across npm, PyPI and Crates, aiming to steal crypto wallet info and browser data.

TrapDoor Malware Campaign Targets Aptos, Solana, and Sui Developer Ecosystems

TrapDoor malware spread through fake crypto developer packages across registries. Attackers targeted SSH keys, AWS tokens, and wallet credentials in builds worldwide. Researchers linked coordinated uploads to Aptos, Sui, and Solana tooling ecosystems. Researchers have uncovered a coordinated malware campaign that targets cryptocurrency developers through fake software packages spread across major coding registries. The operation, named TrapDoor,…

Hackers Target Aptos, Sui, and Solana Developers With TrapDoor Malware Campaign ETHNews

Researchers discover 34 malicious packages from TrapDoor malware targeting Aptos, Sui, and Solana ecosystems. The packages are designed to steal developers’ crypto wallets, SSH keys, cloud credentials, browser data, and environment variables Researchers from Socket Security have issued a warning to communities in the Aptos, Sui, and Solana ecosystems. A new malware called TrapDoor is targeting these ecosystems by injecting malicious packages int…

Trapdoor Malware: The Massive Supply Chain Attack Targeting Crypto Developers

Investigators at Soclet have discovered a new supply attack targeting crypto developers using npm, PyPI, and Crates.io packages. The campaign, dubbed Trapdoor, focuses on stealing crypto wallet keys and other secrets from developers in the crypto space. Supply Chain Attack Scheme Trapdoor Targets De...