A supply chain attack dubbed ‘TrapDoor’ deploys over 34 malicious packages targeting crypto, AI, and security developers.