Injective npm Package Backdoored to Steal Crypto Wallet Keys

Security researchers at Socket have uncovered a supply chain attack targeting @injectivelabs/sdk-ts, a popular npm package used for building on the Injective blockchain. Version 1.20.21 of the package...