Compromised Injective SDK npm Package Exfiltrates Cryptocurrency Wallet Keys (Campaign)
A malicious version of the @injectivelabs/sdk-ts npm package (version 1.20.21) was briefly published to the official Injective Labs npm namespace after a contributor account was compromised. The package contained credential-stealing functionality that silently exfiltrated cryp...