Ai Coding Agent
2 incidents, 0 live. 149 days since the last new one.
2 drains in the last 12 months
2 drains in the last 12 months
2 drains in 2026
Past
May 2026 1
-
TrapDoor packages on npm, PyPI and Crates.io steal wallet data and plant hidden prompts for AI coding tools
Socket reported in late May 2026 a campaign it named TrapDoor: more than 34 malicious packages and 384+ related versions across npm, PyPI and Crates.io that steal crypto wallet data and other developer secrets. The packages also tried to alter files that AI coding tools read, such as .cursorrules and CLAUDE.md, using hidden Unicode instructions meant to get the assistant to run scan-like steps that find and send out secrets. No confirmed losses or victim counts have been published. Developers who installed flagged packages should rotate credentials and move wallet funds.
Developers installing packages from npm, PyPI and Crates.io·Multiple EVM chains·Since May 26, 2026·
February 2026 1
-
Claude-assisted commit adds a North Korea-linked wallet-stealing npm package to an AI crypto trading agent
ReversingLabs reported on 29 April 2026 that a 28 February commit to openpaw-graveyard, an autonomous crypto trading agent built for Solana, was co-authored by Claude Opus and added a bait package (@solana-launchpad/sdk) that silently pulled in the malicious @validate-sdk/v2. The payload steals .env and JSON files and crypto wallet credentials, and adds attacker SSH keys for remote access. ReversingLabs ties the campaign, 60+ packages and 300+ versions over about seven months, to North Korea's Famous Chollima and believes it deliberately targets AI coding agents. No losses were reported; check lockfiles for the named packages and rotate keys on affected machines.
AI trading agent projects and Web3 developers on npm·Solana·Since Feb 28, 2026·
No drains match these filters.