Injective SDK on npm infected with cryptocurrency wallet stealer

2 sourcesFirst reported 12 days agoUpdated 12 days ago

AI summary: catch up in 20 seconds

Hackers compromised the Injective Labs SDK project's GitHub repository to publish a malicious package on npm.
The infected package was designed to steal cryptocurrency wallet private keys and mnemonic seed phrases.
This incident raises concerns for developers and applications managing Injective wallet workflows.
Researchers from Socket reported the attempted backdoor on the Injective npm package.

Generated by AI from the 2 sources below · always verify with the originals

AI summary: catch up in 20 seconds

Summarising the coverage…

Generated by AI from the 2 sources below · always verify with the originals

Story timeline

10 July

Hackers attempted to backdoor the Injective npm package to steal wallet keys.

Loading…

Hackers tried to backdoor Injective npm package to steal wallet keysCointelegraph · 12 days ago

No comments yet. Be the first to join the discussion.

10 July

Hackers attempted to backdoor the Injective npm package to steal wallet keys.

AI summary: catch up in 20 seconds

Hackers compromised the Injective Labs SDK project's GitHub repository to publish a malicious package on npm.
The infected package was designed to steal cryptocurrency wallet private keys and mnemonic seed phrases.
This incident raises concerns for developers and applications managing Injective wallet workflows.
Researchers from Socket reported the attempted backdoor on the Injective npm package.

Generated by AI from the 2 sources below · always verify with the originals