Injective SDK on npm infected with cryptocurrency wallet stealer

By Bill Toulas

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node Package Manager (npm) that stole cryptocurrency wallet private keys and mnemonic seed phrases. [...]

Read full article at BleepingComputer

More from BleepingComputer

Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse 6 hours ago DeadLock ransomware uses blockchain to resist infrastructure takedown 9 hours ago Sandworm hackers target IT pros with trojanized WireGuard VPN client 10 hours ago Cisco warns of ASA and FTD VPN flaw exploited to crash devices 12 hours ago Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees 13 hours ago