TLDR Tech / IT
Malicious Packages on npm, PyPI, and Crates.io Steal Crypto Wallets, SSH Keys, and Cloud Credentials
The “TrapDoor” supply-chain attack poisoned 34 packages across npm, PyPI, and Crates.io, affecting more than 384 versions.
Read the full story