Bleeping Computer
8.5 — CRITICAL
Injective SDK on npm infected with cryptocurrency wallet stealer
Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node Package Manager (npm) that stole cryptocurrency wallet private keys and mnemonic seed phrases. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A supply-chain attack compromised the Injective Labs SDK project's GitHub repository, publishing a malicious package on npm that stole cryptocurrency wallet private keys and mnemonic seed phrases.
⚙️Technical Details
Affected Systems
@injectivelabs/sdk-ts
Attack Vectors
npmGitHub repository compromise
💥Impact Assessment
Severity: critical
Who Is at Risk
Developers building cryptocurrency wallets, trading bots, decentralized exchanges, DeFi applications, and payment tools using the Injective SDK.
🛡️Recommended Actions
1Transfer cryptocurrency to new wallets
2Rotate all secrets in the environment
3Monitor for suspicious activity
📦Affected Products
Npm Package: @injectivelabs/sdk-ts
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.