NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

Injective SDK on npm infected with cryptocurrency wallet stealer

BACKGROUND
1 SIGNALFIRST DETECTED 9 July 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
Other feeds and industry voices
10 Jul
Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages

Unknown threat actors compromised the Injective Labs SDK project's GitHub repository and leveraged it to publish a malicious package on the npm registry to steal cryptocurrency

REPORT · WHAT · The Hacker NewsOPEN STORY
Sources
BleepingComputer

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →