TrapDoor Supply-Chain Attack Hits npm, PyPI, Crates.io Dev Tools

Socket's May 24 disclosure of TrapDoor catalogued more than 34 malicious packages and 384 related versions across npm, PyPI and Crates.io, each one aimed not at end users but at the developers who build and ship DeFi protocols. The payloads rode ordinary workflows — npm postinstall hooks, PyPI…