TrapDoor Campaign Targets Solana Developers With More Than 34 Malicious Packages

TrapDoor, a credential-theft campaign involving more than 34 malicious packages and more than 384 malicious package versions, targets crypto and decentralized finance developers, including those in the Solana ecosystem. Packages tied to the campaign appeared on npm and PyPI. The campaign was first disclosed May 24. Solana is a high-performance blockchain known for scalability and low transaction costs. The campaign's connection to Solana is its targeting of developers in that ecosystem. Simon Yoon reports on blockchain technology for TokenPost. Send corrections or tips to info@tokenpost.com.