DevBleepingComputerabout 1 hour ago
Injective SDK npm package steals crypto wallets
1 min read
Hackers compromised an Injective Labs contributor's GitHub account and published malicious version 1.20.21 of the @injectivelabs/sdk-ts npm package. The malware steals cryptocurrency wallet private keys and mnemonic seed phrases when developers use SDK functions to generate or import wallet keys. The malicious package was downloaded 310 times before being deprecated.
Level
Hype check
Tap to vote and see what everyone thinks.
