Injective software package hit by malicious supply chain attack – Details
According to the title, a software package associated with Injective was hit by a malicious supply chain attack. The provided article body contains only webpage styling code (CSS) and no substantive details about the incident. No further facts about the attack can be extracted from the given text.
DeFi Intel is an entity-graph aggregator: we curate, tag and link crypto news to a typed knowledge graph of protocols, tokens, people and incidents. We do not republish the full article body. Use the link above to read the original report at Ambcrypto.
A hijacked maintainer account published a poisoned @injectivelabs/sdk-ts release that harvested wallet keys and spread to 18 dependent packages; it was reverted within about an hour with no reported fund losses.
Entities in this story
Discussion
Comments are reviewed before publication.
Want the full article?
Continue reading on Ambcrypto →
No comments yet.