Supply-chain attacksBriefConfirmed by two or more outlets
TrapDoor across npm, PyPI and crates.io
34 packages, credential theft plus persistence.
- Disclosed
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.