# TrapDoor Campaign Targets Devs

Page: https://stenobird.com/podcast/bitcoin-crypto-news-today-2-min-news-the-daily-news-now-7492376/trapdoor-campaign-targets-devs
Text version: https://stenobird.com/podcast/bitcoin-crypto-news-today-2-min-news-the-daily-news-now-7492376/trapdoor-campaign-targets-devs.md
Podcast: [Bitcoin & Crypto News Today | 2 Min News | The Daily News Now!](https://stenobird.com/podcast/bitcoin-crypto-news-today-2-min-news-the-daily-news-now-7492376)
Published: 2026-05-29T09:21:13+00:00
Episode link: https://api.fastcast.ai/audio/70ec5881-9624-4dbc-86ef-8390b3a3cb21.mp3
Audio file: https://api.fastcast.ai/audio/70ec5881-9624-4dbc-86ef-8390b3a3cb21.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/bitcoin-crypto-news-today-2-min-news-the-daily-news-now-7492376/episodes/trapdoor-campaign-targets-devs
Duration seconds: 125

## Resource

A new cyberattack called TrapDoor is targeting software developers by injecting malicious packages into popular open-source registries like npm and PyPI. These fake tools, disguised as helpful crypto and AI utilities, secretly steal wallet keys, cloud credentials, and SSH tokens—often from the same machines where developers store sensitive data. Even worse, some packages trick AI coding assistants into running fake security scans that leak secrets. Security firm Socket has flagged the packages, but attackers used sneaky tactics to sneak in via legitimate contributions. No victims confirmed yet, but this campaign shows how devs holding digital keys are now prime targets—stay vigilant on every install. Support the show: Get a discount at https://solipillow.com/discount/dnn. Advertise on DNN: advertise@thednn.ai This is an automated, high-level news summary based on public reporting. Report issues to feedback@thednn.ai. View sources & latest updates: https://sources.thednn.ai/77d6949fe67540d4

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/bitcoin-crypto-news-today-2-min-news-the-daily-news-now-7492376/episodes/trapdoor-campaign-targets-devs/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/bitcoin-crypto-news-today-2-min-news-the-daily-news-now-7492376/trapdoor-campaign-targets-devs.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.