--- title: "TrapDoor Crypto Stealer Supply Chain Attack Hits 34 Packages..." url: https://daily.dev/posts/trapdoor-crypto-stealer-supply-chain-attack-hits-34-packages--jebsi326a source_url: https://socket.dev/blog/trapdoor-crypto-stealer-npm-pypi-crates type: article source: "Socket" published: 2026-05-24T16:32:05.852Z updated: 2026-05-24T16:32:32.419Z tags: ["security", "cyber", "malware", "npm"] reading_time: 11 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # TrapDoor Crypto Stealer Supply Chain Attack Hits 34 Packages... **[Socket](https://daily.dev/sources/socketdev)** · 11 min read · 0 upvotes · 0 comments ## Summary Socket researchers have uncovered TrapDoor, an active supply chain attack spanning 34+ malicious packages across npm, PyPI, and Crates.io. The campaign targets crypto, DeFi, Solana, and AI developers, stealing SSH keys, crypto wallet data, AWS credentials, GitHub tokens, browser data, and environment variables. npm packages use postinstall hooks to deploy a 1,149-line credential harvester (trap-core.js) with persistence via .cursorrules, CLAUDE.md, Git hooks, systemd, and cron. PyPI packages execute remote JavaScript on import, while Crates.io packages abuse build.rs scripts to exfiltrate keystores via GitHub Gists. A novel feature involves injecting hidden Unicode instructions into AI coding tool config files (.cursorrules, CLAUDE.md) to trick AI assistants into running fake 'security scans' that exfiltrate data. The attacker also opened PRs against major open source AI projects (LangChain, LlamaIndex, MetaGPT) to plant malicious config files. Socket detected packages in under 6 minutes on average and has reported all identified packages to affected registries. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [TrapDoor malware campaign puts developer workstations in CISO spotlight](https://daily.dev/posts/trapdoor-malware-campaign-puts-developer-workstations-in-ciso-spotlight-i8q0wnnkh) · CSO Online · 1 upvotes · 0 comments - [New npm worm hits CI pipelines and AI coding tools](https://daily.dev/posts/new-npm-worm-hits-ci-pipelines-and-ai-coding-tools-3fx3mdyns) · InfoWorld · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#malware](https://daily.dev/tags/malware), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/trapdoor-crypto-stealer-supply-chain-attack-hits-34-packages--jebsi326a)