Malicious packages across npm, PyPI, and Crates.io show how poisoned developer workflows can become a route into enterprise systems.
A coordinated malware campaign known as TrapDoor has hit software ecosystems widely used by crypto and blockchain developers.