FeesSafety
Pluang+

Credential-theft campaign targets Solana and DeFi developers via malicious npm and PyPI packages

Market News
31 Oct 2026, 14:41 WIB
Tokenpost
View Source
Bearish
Credential-theft campaign targets Solana and DeFi developers via malicious npm and PyPI packages

A credential-theft campaign named TrapDoor has been discovered, involving over 34 malicious packages and 384 versions targeting developers in the crypto and decentralized finance (DeFi) space, including those working within the Solana blockchain ecosystem. These malicious packages were found on popular developer platforms npm and PyPI, posing a security risk to developers by potentially stealing credentials. Solana, known for its high performance and low transaction fees, is specifically targeted due to its growing developer community. The campaign was first disclosed on May 24, highlighting ongoing cybersecurity threats in blockchain development environments.

The TrapDoor campaign targeting Solana developers is a notable cybersecurity event. For readers following the broader cryptocurrency market, here is Pluang's market snapshot as of Oct 31, 2026 18:21 WIB: out of 50 major cryptocurrencies, 28 rose and 19 fell. Notable movers include XLM at Rp3.067 with a 2.30% increase, FIL at Rp15.460 up 2.26%, and AVAX at Rp152.325 down 2.14%.

More News

Bitcoin trades at a discount on Coinbase amid cautious U.S. institutional activity and mixed market signals.

Bitcoin trades at a discount on Coinbase amid cautious U.S. institutional activity and mixed market signals.

From October 27 to 31, Bitcoin traded at a discount on Coinbase compared to Binance, signaling subdued U.S. buying pressure despite a 38% rise in institutional trading volume on Coinbase Prime. CME data shows more short Bitcoin futures than longs, in...

Market News
Neutral
4 hours ago
Ripple froze $40.5M in stolen RLUSD after Binance hack but couldn't freeze $296M in XRP.

Ripple froze $40.5M in stolen RLUSD after Binance hack but couldn't freeze $296M in XRP.

Following Binance's $6.3 billion security breach, Ripple successfully froze $40.5 million in stolen RLUSD tokens linked to the attackers, preventing further unauthorized withdrawals. However, Ripple could not freeze $296 million worth of native XRP s...

Market News
Bearish
4 hours ago
Exploit in Curve Finance's lending market causes $822K loss for 27 borrowers

Exploit in Curve Finance's lending market causes $822K loss for 27 borrowers

On March 1, 2026, an exploit in Curve Finance's sDOLA/crvUSD LlamaLend market led to estimated losses of 822,475 crvUSD for 27 borrowers. The attack used a two-part flash loan to hard-liquidate positions, involving over 11.7 million crvUSD in collate...

Market News
Bearish
4 hours ago
Aura Biosciences advances with strong cash and Phase 3 trial for eye cancer expected in 2027

Aura Biosciences advances with strong cash and Phase 3 trial for eye cancer expected in 2027

Aura Biosciences is positioned as a low-risk, fully funded company focusing on bel-sar treatment for early choroidal melanoma, with pivotal Phase 3 trial data expected in 2027. The company holds $323.8 million in cash as of June 2026, supporting oper...

Market News
Bullish
4 hours ago
Claims of Curve Finance losing $10B are unverified; current liquidity is $1.11B with no official breach reported.

Claims of Curve Finance losing $10B are unverified; current liquidity is $1.11B with no official breach reported.

A circulating claim that Curve Finance lost $10 billion is unverified with no official announcements or on-chain evidence supporting it. The protocol currently holds about $1.11 billion in liquidity, making a $10 billion loss structurally impossible....

Market News
Bearish
4 hours ago
banner-footerbanner-footer

Invest & Trade with
#1 Award-Winning Investment Super App