‘TrapDoor’ malware targets crypto dev tools in supply chain attack

This post was originally published on this site

Socket says a campaign of malicious packages is aiming to steal crypto and is injecting hidden instructions that hijack popular AI coding assistants.