[key points]

Key points

• •Malicious open-source packages on npm and PyPI targeted dYdX cryptocurrency exchange users.
• •Compromised packages stole wallet credentials and backdoored devices.
• •Affected packages include specific versions of @dydxprotocol/v4-client-js on npm and dydx-v4-client on PyPI.
• •The malware exfiltrated seed phrases and device fingerprints, using typosquatting to mimic a legitimate dYdX service.