#Trapdoor is the campaign that has already distributed over 34 malicious packages on npm, PyPI, and Crates.io. They pose as tools for Solana ($SOL ), Sui ($SUI ), and Aptos ($APT ) and steal wallet keys, SSH, and credentials. It's not a direct hack on the chain, but it's a strong reminder: carefully review what you install if you're developing.

Have you audited your dependencies recently?

Source: CoinDesk