A coordinated malware campaign known as TrapDoor has hit software ecosystems widely used by crypto and blockchain developers.