ALERT: TrapDoor malware installs as fake developer tools, steals SSH keys and wallet files, then hijacks AI coding assistants so future sessions unknowingly run fake security scans that send your credentials to attackers. (CoinDesk)