# Hidden Unicode · Drain Watch

1 incidents, 0 live. JSON: https://drains.watch/t/hidden-unicode.json · RSS: https://drains.watch/t/hidden-unicode/feed.xml

- [TrapDoor packages on npm, PyPI and Crates.io steal wallet data and plant hidden prompts for AI coding tools](https://drains.watch/i/trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026) (closed, High, Partly contained, since May 26, 2026)