Poisoned Protocol: dYdX Supply Chain Attack Injects RATs into npm & PyPI

A supply-chain attack compromised npm and PyPI dYdX client libraries, embedding a seed-phrase-stealing payload in the JavaScript package and a stealthy RAT with heavy obfuscation and persistence in the Python package; specific compromised versions and a typosquatting domain (dydx.priceoracle.site) were identified, and developers using these libraries should assume their environments may be fully compromised.