Reported by 1 outlet

Timeline

1. original reporting

   TrapDoor Supply Chain Campaign — 34 Malicious Packages Across npm, PyPI, and Crates.io Target Crypto/AI Developers

   cyberpress.org · 142d ago · May 25th, 2026

   A coordinated supply chain attack first surfaced on May 22 is actively compromising developers across three major package ecosystems. Dubbed "TrapDoor" by Socket Security researchers, the campaign spans 21 npm packages, 7 PyPI packages, and 6 Crates.io packages masquerading as developer utilities, wallet checkers, security auditors, and build helpers — all designed to blend into normal development workflows in crypto, DeFi, Solana, and AI tooling.

   Each ecosystem is exploited through its native execution model: npm packages trigger a 1,149-line credential harvester via postinstall hooks; PyPI packages auto-execute a remote JavaScript payload on import using node -e from the attacker's GitHub Pages domain; Crates.io packages abuse build.rs during Rust compilation to XOR-encrypt and exfiltrate local keystores. All 384+ malicious versions and artifacts anchor to the GitHub account ddjidd564, which hosts an AUDIT-Matrix.md describing the operation as a "Universal AI Agent Extraction Framework."

   The most sophisticated technique involves poisoning AI coding assistant configurations: hidden zero-width Unicode characters instruct Cursor and Claude Code to execute "security scans" that silently exfiltrate developer secrets. The attackers also opened malicious PRs against langchain-ai/langchain, langflow-ai/langflow, run-llama/llama_index, and OpenHands/OpenHands — each PR attempted to inject attacker-controlled .cursorrules or CLAUDE.md under innocuous commit messages.