TrapDoor: 34 Malicious Packages Across npm, PyPI, and Crates.io Steal Crypto Wallets, SSH Keys, and Poison AI Assistants May 26, 2026