Researchers have identified a new threat campaign targeting Solana crypto wallet holders by exploiting Gmail's trusted status. Hackers are using malicious NPM packages to steal private keys via Gmail's SMTP servers. These packages, disguised as legitimate tools, intercept private keys during wallet interactions. The attack can compromise multiple accounts simultaneously, and researchers have reported the malicious packages to authorities for removal.