# TrapDoor Supply Chain Attack Targets Crypto and AI Developers

**Published:** 2026-05-29T09:17:52.000Z  
**Topic:** Solana  
**Sentiment:** neutral  
**Publisher:** TrendWatcher — https://www.trendwatcher.in/article/5bc7e79a-3149-4cc8-ac57-a60e8297f7f2

A coordinated supply chain attack named TrapDoor has compromised over 34 software packages across npm, PyPI, and Crates.io to steal developer credentials.

A coordinated software supply chain attack campaign dubbed "TrapDoor" has targeted developers in the cryptocurrency, decentralized finance (DeFi), and artificial intelligence sectors [1]. Security researchers at Socket identified that the campaign, which began on May 22, 2026, utilized more than 34 malicious packages across 384 versions to exfiltrate sensitive data from developer environments [2].

**Key takeaways**
* The campaign targets npm, PyPI, and Crates.io to distribute malware designed to steal crypto wallets, SSH keys, and cloud credentials [1].
* Malicious packages masquerade as legitimate development tools for ecosystems including Solana, Sui, and Aptos [2].
* Attackers are embedding hidden instructions in AI configuration files to trick AI coding assistants into performing unauthorized security scans [1].
* The malware establishes persistence on infected systems through cron jobs, systemd services, and Git hooks [2].

## Sophisticated Execution Across Ecosystems
The TrapDoor campaign employs ecosystem-specific methods to compromise developer machines [1]. On npm, malicious packages use post-install hooks to deploy a JavaScript payload known as "trap-core.js," which scans for credentials and validates them against AWS and GitHub services [2]. Python packages on PyPI are designed to execute remote JavaScript payloads upon import, allowing attackers to update their malicious behavior dynamically without needing to republish the package [1]. Meanwhile, Rust crates on Crates.io utilize "build.rs" scripts that activate during compilation to search for local keystores, specifically targeting data related to Sui and Move development [2].

The stolen data includes information from cryptocurrency wallets—specifically those associated with Solana, Sui, Aptos, Coinbase, Binance, and MetaMask—as well as browser profiles and environment variables [2]. Beyond simple data theft, the malware attempts lateral movement across networks by leveraging compromised SSH keys [2]. The attackers have also been observed submitting pull requests to popular open-source projects, such as LangChain, to propagate malicious configurations [2].

## AI Manipulation and Future Risks
A notable feature of the TrapDoor campaign is the use of hidden instructions within files like ".cursorrules" and "CLAUDE.md" [1]. By using techniques such as zero-width Unicode characters, attackers attempt to manipulate AI coding assistants into executing "security scans" that actually result in the discovery and exfiltration of secrets [2]. Socket researchers suggest that the threat actors are testing whether these hidden instructions can be introduced into open-source workflows to exploit the way AI tools parse project files [1].

## Why it matters
The TrapDoor incident highlights a growing trend of threat actors targeting the software supply chain to gain deep access to developer environments [1]. By blending traditional typosquatting with advanced persistence mechanisms and AI manipulation, the campaign poses risks that extend beyond immediate financial loss to include broader CI/CD pipeline breaches and repository access [2]. Security experts are urging developers to audit their dependency lockfiles, rotate credentials from potentially compromised systems, and remain vigilant when integrating new open-source tools into their workflows [2].

## Sources
1. The Hacker News — [TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO](https://thehackernews.com/2026/05/trapdoor-supply-chain-attack-spreads.html)
2. Crowdfund Insider — [Malware : New ‘TrapDoor’ Supply Chain Attack Reportedly Targets Blockchain and Crypto Devs Across Multiple Ecosystems](https://www.crowdfundinsider.com/2026/05/281651-malware-new-trapdoor-supply-chain-attack-reportedly-targets-blockchain-and-crypto-devs-across-multiple-ecosystems/)
3. CoinJournal — [TrapDoor attack targets crypto wallets, AWS keys and GitHub tokens](https://coinjournal.net/news/trapdoor-attack-targets-crypto-wallets-aws-keys-and-github-tokens/)

---
Cite as: TrendWatcher, "TrapDoor Supply Chain Attack Targets Crypto and AI Developers", https://www.trendwatcher.in/article/5bc7e79a-3149-4cc8-ac57-a60e8297f7f2