Solana FakeFix: 25 Malicious npm and PyPI Packages Lure Developers With Fake Stable Builds

A sophisticated campaign of 25 malicious npm and PyPI packages, masquerading as trusted Solana and CMS developer tools, was used to steal sensitive secrets and deploy backdoors by exploiting install-time and import-time execution hooks, typosquatting, and social engineering, posing a significant supply chain threat to developers and CI systems.