UPDATED 8:27 PM ET A GoCheckMy site
GoCheckMyCrypto Crypto, checked.
Unconfirmed, one reportnewssecurity

Attackers Targeted Injective NPM Package to Steal Wallet Keys

Attackers attempted to compromise an Injective NPM package with malware designed to steal wallet keys, according to Cointelegraph. The supply-chain attack targeted Injective developer tooling. Apps and users could face risk if the package is unpatched.

Hackers attempted to backdoor an Injective NPM package with malware designed to steal wallet keys, according to Cointelegraph.

The supply-chain attack targeted Injective developer tooling, posing a direct risk to apps and users if the package is left unpatched.

Developers relying on the affected tooling are the primary population exposed.

The key fact

A supply-chain attack targeted an Injective NPM package with malware intended to steal wallet keys.

Ranked, source-checked, and verified by the desk's independent review pass.