Supply Chain Attack Targets Crypto Developers with Credential-Stealing TrapDoor Malware

This widespread campaign reveals a critical blind spot in crypto security: malicious code in developer dependencies that silently harvest credentials and wait for the perfect moment to drain wallets. Unlike on-chain attacks that trigger alerts, TrapDoor operates invisibly in development environments, affecting developers across Solana, Aptos, and Sui ecosystems simultaneously.