SlowMist has identified a potential security threat in the Linux Snap Store, where attackers exploited expired domains to hijack trusted publishers and distribute malicious wallet updates, potentially targeting crypto seed phrases.