Compromised Injective Labs SDK repo led to npm key-stealing package
Source headline: Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages
Intelligence Summary
Unknown actors compromised Injective Labs' GitHub repository. They then published a malicious npm package intended to impersonate the Injective Labs SDK. The trojanized release, @injectivelabs/sdk-ts@1.20.21, was designed to steal cryptocurrency wallet private keys and mnemonic seed phrases. It included fake telemetry logic that collected and exfiltrated sensitive wallet data. Users integrating the SDK should verify package versions, review lockfiles, and rotate any exposed wallet credentials immediately.
Recommended Action
Inventory where Injective Labs SDK (sdk-ts) runs in your environment and treat this as an active remediation item. Until then, watch authentication and outbound traffic logs for the indicators described in the source. This signal rests on a single report, so corroborate it before acting on anything irreversible.