DogWifTools, a Solana rug-pull generator tool, was compromised via supply chain attack. Attackers gained control of the GitHub repository token and inserted malware into versions 1.6.3-1.6.6. Updates delivered malicious updater.exe files that acted as Remote Access Trojans, stealing cryptocurrency wallet private keys and extracting $10M from users.