TrapDoor Campaign Targets Solana Developers with Over 384 Malicious Packages
A widespread credential theft campaign has compromised multiple developer platforms with hundreds of malicious package versions targeting Solana developers.
A widespread credential theft campaign has compromised multiple developer platforms with hundreds of malicious package versions targeting Solana developers. Solana (SOL) is trading at ₹9,048 ($95.19), down 0.5% since this brief published. This is an original Token Times brief based on reporting by The Cryptonomist, with live market data added, as of Sun, 01 Nov 2026 12:15:01 UTC.
This campaign poses a significant threat to the Solana ecosystem by targeting its developer community, potentially compromising sensitive credentials and undermining trust in the platform's security.
- Over 384 malicious package versions detected across npm, PyPI, and Crates.io
- Solana developers are the primary targets of the TrapDoor campaign
- Credential theft could lead to further security breaches in the Solana ecosystem
- Solana's Alpenglow Upgrade Targets 150ms Transaction Finality
- TrapDoor Campaign Targets Solana Developers with Over 384 Malicious Packages — this brief
The TrapDoor credential theft campaign, first disclosed by SocketSecurity on May 24, has been identified as a major threat to the 
Solana developer community. The campaign uses a sophisticated approach to distribute malicious packages across multiple platforms, including npm, PyPI, and Crates.io.
According to SlowMist, more than 384 malicious package versions have been identified, while Coinfomania reports a similar total but only across npm and PyPI. This discrepancy suggests the possibility of additional packages being present on other platforms.
The campaign's focus on Solana developers is particularly concerning given the platform's growing popularity and the sensitive nature of developer credentials. Compromised credentials could lead to further security breaches and undermine trust in the Solana ecosystem.
This development comes amid a broader context of increasing cyber threats targeting the cryptocurrency industry. The TrapDoor campaign's scale and complexity highlight the need for enhanced security measures and vigilance among developers and platform operators.
Solana's price has shown slight resilience despite the news, currently trading at $95.67 with a 0.84% gain in the past 24 hours. However, the 7-day trend shows a decline of 5.73%, indicating potential market concerns about the security incident. The overall crypto market remains relatively stable with a total market cap of $2.67 trillion.
Since this brief published about 23 hours ago, Solana (SOL) has moved from ₹9,093.44$95.67 to ₹9,047.82$95.19 — -0.50%.
The chart plots SOL's price: grey is the move before this brief published, the vertical dashed line marks the moment it published, the horizontal dashed line is the price then, and the coloured area is the move since — from Token Times's market data (daily resolution). It shows what happened after the news, not that the news caused it; many factors move prices. Not financial advice.
At today's peer-to-peer rate, 1 SOL ≈ ₹9,852.64 (about $95.19), down 0.7% over 24 hours. The rupee itself trades about 8.9% above the official rate on the P2P market, so a Indian buyer's effective cost differs from the headline dollar price.
Live market data
Current prices for the asset in this story — live, source-stamped, updated every 15 minutes.
Figures and sectors in this story, checked live against on-chain aggregators · October 31, 2026.
Token Times reads these figures directly from on-chain aggregators (DeFiLlama, mempool.space) at build time — independent of what any outlet reported. Sector totals aggregate every protocol DeFiLlama tracks in that category. Values are live and will change.
TrapDoor Campaign Targets Solana Developers with Over 384 Ma — questions & answers
What is the TrapDoor credential theft campaign?
It's a malicious campaign targeting Solana developers, using over 384 malicious package versions across developer platforms to steal credentials.
How many platforms are affected by the TrapDoor campaign?
The campaign has been detected on npm, PyPI, and Crates.io, with the highest concentration of malicious packages on npm and PyPI.
What is the potential impact on Solana?
The theft of developer credentials could lead to further security breaches, compromising the integrity of the Solana ecosystem.
How much is 1 Solana worth in rupee today?
About ₹9,852.64 at the live peer-to-peer (P2P) USDT rate, which is what Indians typically trade at — equivalent to roughly $95.19. The rupee price moves with both SOL's US-dollar price and the USDT/INR rate; use our Solana in rupee page for any amount.
Has Solana's price moved since this brief was published?
SOL is down 0.50% since this brief first published — trading at ₹9,048 ($95.19) now versus ₹9,093 ($95.67) at publication. Token Times re-checks this figure against CoinGecko and Binance every 15 minutes.
Which outlets reported this story?
This is an original Token Times brief that synthesises reporting from The Cryptonomist. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original Token Times brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.