Industry
crypto
- First Reported
- May 24, 2026
- Latest Reported
- May 24, 2026
Reported Context (1)
- Socket researchers have identified an active crypto stealer supply chain attack spanning npm, PyPI, and Crates.io. The campaign, which Socket is tracking as TrapDoor, spans more than 34 malicious packages and 384+ TrapDoor Supply-Chain Campaign Targets npm, PyPI and Crates.io With Crypto Stealer
Malware (2)
Threat Actors (2)
MITRE ATT&CK (12)
Vendors (2)
Products (3)
Industries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.