It can be analyzed in just 58 seconds, and attackers are continuously updating; this attack and defense rhythm is even more exciting than DeFi mining.

Security company Socket Security discloses TrapDoor supply chain attacks, actively injecting malicious packages into repositories such as npm, PyPI, Crates.io, and others. A total of 34 malicious packages and 384 versions and components have been identified, with attackers continuously pushing new versions. TrapDoor targets developers in the cryptocurrency, DeFi, AI, and security fields, stealing wallets, SSH keys, cloud credentials, GitHub tokens, browser data, environment variables, and API keys. The median detection time is 5 minutes and 27 seconds, with the fastest detection occurring 58 seconds after a new version is released.