Markets › News › Technology

TrapDoor Campaign Targets Solana Developers with Over 384 Malicious Packages

A widespread credential theft campaign has compromised multiple developer platforms with hundreds of malicious packages.

A widespread credential theft campaign has compromised multiple developer platforms with hundreds of malicious packages. Solana (SOL) is trading at $95.70. This is an original TLT brief based on reporting by The Cryptonomist, with live market data added, as of Sat, 31 Oct 2026 15:15:02 UTC.

Why it matters

This campaign poses a significant threat to Solana's developer ecosystem by targeting critical credentials, potentially compromising projects and security across the network.

Key takeaways
  • TrapDoor campaign uses 384+ malicious versions across npm, PyPI, and Crates.io.
  • Solana developers are primary targets of the credential theft operation.
  • Malicious packages are distributed through popular package repositories.
  • SOL price remains relatively stable amid the security threat.

The TrapDoor credential theft campaign, first disclosed by SocketSecurity on May 24, has been identified as a significant threat to the Solana developer ecosystem. The operation uses more than 384 malicious package versions distributed across popular code repositories including npm, PyPI, and Crates.io.

According to SlowMist, these malicious packages are designed to steal developers' credentials, potentially compromising the security of Solana projects. Coinfomania reports that the attack is primarily concentrated on npm and PyPI, though the exact distribution of packages between these platforms is unclear.

While the total number of affected developers is not yet known, the widespread distribution of these malicious packages across major package repositories indicates a coordinated effort to target the broader developer community, with Solana developers being the primary focus.

The attack comes at a time when Solana's ecosystem is experiencing growth, making it an attractive target for cybercriminals. The campaign's success could undermine trust in the network's security and potentially impact developer confidence.

Despite the security threat, Solana's price remains relatively stable, with a 24-hour increase of 0.84% and a current price of $95.67. However, the long-term impact on SOL and the broader market will depend on how the situation unfolds and the effectiveness of mitigation efforts.

Market reaction since this brief Live

Since this brief published about 2 hours ago, Solana (SOL) has moved from $95.67 to $95.70 — +0.03%.

$95.67$95.68$95.69$95.69$95.70 published · $95.67 now · $95.70 (+0.03%) Oct 31 13:13 UTC Oct 31 15:15 UTC
BeforeSince publishPublished · $95.67

The chart plots SOL's price: grey is the move before this brief published, the vertical dashed line marks the moment it published, the horizontal dashed line is the price then, and the coloured area is the move since — from TLT's market data (daily resolution). It shows what happened after the news, not that the news caused it; many factors move prices. Not financial advice.

What this means in naira

At today's peer-to-peer rate, 1 SOL ≈ ₦131,595.63 (about $95.70), up 0.6% over 24 hours. The naira itself trades about 2.2% above the official rate on the P2P market, so a Nigerian buyer's effective cost differs from the headline dollar price.

Live market data

Current prices for the asset in this story — live, source-stamped, updated every 15 minutes.

#7
$95.70 ▲ 0.57%
7d -5.57%MCap $56.47BFull SOL data →
The market when this published · October 31, 2026
Total market cap$2.67T
Bitcoin 24h+0.83%
Ethereum 24h+1.41%
BTC dominance58.3%
Fear & Greed30 · Fear
On-chain & primary-source check

Figures and sectors in this story, checked live against on-chain aggregators · October 31, 2026.

Solana DeFi TVL$5.45BDeFiLlama ↗

TLT reads these figures directly from on-chain aggregators (DeFiLlama, mempool.space) at build time — independent of what any outlet reported. Sector totals aggregate every protocol DeFiLlama tracks in that category. Values are live and will change.

TrapDoor Campaign Targets Solana Developers with Over 384 Ma — questions & answers

What is the TrapDoor campaign?

The TrapDoor campaign is a credential theft operation targeting Solana developers, using over 384 malicious package versions across npm, PyPI, and Crates.io.

How are Solana developers affected?

Solana developers are targeted through malicious packages designed to steal their credentials, potentially compromising project security.

What is the current status of the Solana price?

Solana's price is $95.67, up 0.84% in the last 24 hours, showing relative stability amid the security threat.

How much is 1 Solana worth in naira today?

About ₦131,595.63 at the live peer-to-peer (P2P) USDT rate, which is what Nigerians typically trade at — equivalent to roughly $95.70. The naira price moves with both SOL's US-dollar price and the USDT/NGN rate; use our Solana in naira page for any amount.

Which outlets reported this story?

This is an original TLT brief that synthesises reporting from The Cryptonomist. It is not a copy of any one article — follow the source links above for the original reporting.

TLT Newsdesk Data-stamped

TLT's newsdesk writes original briefs by synthesising coverage from across the crypto press — 50+ outlets including CoinDesk, The Block, Decrypt and Cointelegraph — cross-checking the figures they report — and verifying them against on-chain data from DeFiLlama and mempool.space — plus live market context (CoinGecko, Binance). We summarise and link to every source; we never reproduce full articles. Read our editorial standards and how we use AI. Not financial advice.

Market data verified against CoinGecko & Binance · October 31, 2026 ⛓ Timestamped at Bitcoin block #973,980 sha256:95dbd5c87e355419
Based on reporting by The Cryptonomist — this is an original TLT summary with live market data, not the original article.The Cryptonomist · Oct 31 13:13 ↗

Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.