TrapDoor supply chain attack hits PyPI, NPM, and crates.io | Heykuki News