Injective software package hit by malicious supply chain attack – Details
A software package associated with Injective was hit by a malicious supply chain attack. No further facts about the attack can be extracted from the given text.
DeFi Intel is an entity-graph aggregator: we curate, tag and link crypto news to a typed knowledge graph of protocols, tokens, people and incidents. We do not republish the full article body. Use the link above to read the original report at Ambcrypto.
A hijacked maintainer account published a poisoned @injectivelabs/sdk-ts release that harvested wallet keys and spread to 18 dependent packages; it was reverted within about an hour with no reported fund losses.
Entities in this story
Discussion
Comments are reviewed before publication.
Want the full article?
Continue reading on Ambcrypto →
No comments yet.