TrapDoor Crypto Stealer Supply Chain Across NPM, PyPI, and Crates.io (socket.dev)

I just learned of this by looking at the ssh break & enter attempts on my brand new VPS and Googling the peculiar usernames being used (https://world-playground-deceit.net/blog/2026/05/a-bored-loo... will amend the article to mention it).