--- title: Injective SDK on npm infected with cryptocurrency wallet... description: Hackers compromised a GitHub account belonging to a legitimate Injective Labs contributor and used it to publish a malicious version (1.20.21) of the... canonical: https://daily.dev/posts/injective-sdk-on-npm-infected-with-cryptocurrency-wallet-stealer-2u95ebyn1 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Injective SDK on npm infected with cryptocurrency wallet stealer | daily.dev og:description: Hackers compromised a GitHub account belonging to a legitimate Injective Labs contributor and used it to publish a malicious version (1.20.21) of the... og:url: https://daily.dev/posts/injective-sdk-on-npm-infected-with-cryptocurrency-wallet-stealer-2u95ebyn1 og:image: https://api.daily.dev/og/posts/2u95Ebyn1.png og:image:alt: Injective SDK on npm infected with cryptocurrency wallet stealer og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Injective SDK on npm infected with cryptocurrency wallet stealer **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary Hackers compromised a GitHub account belonging to a legitimate Injective Labs contributor and used it to publish a malicious version (1.20.21) of the @injectivelabs/sdk-ts npm package. The package, which has 50,000 weekly downloads, was infected with a cryptocurrency wallet stealer that captures mnemonic seed phrases and private keys when wallet generation or import functions are called. The stolen data is encoded in base64 and exfiltrated via HTTP POST to an Injective Labs public endpoint to blend in with legitimate traffic. The malicious version was downloaded 310 times before being deprecated, and 87 dependent packages with a combined 112,000 downloads were also affected. Developers who may have been compromised are advised to transfer funds to new wallets and rotate all secrets. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Compromised Injective SDK npm Package Exfiltrates Wallet Key...](https://daily.dev/posts/compromised-injective-sdk-npm-package-exfiltrates-wallet-key--cbv0i2kiw) · Socket · 1 upvotes · 0 comments - [Injective npm Supply Chain Attack: 18 Packages Backdoored to Steal Crypto Wallet Keys](https://daily.dev/posts/injective-npm-supply-chain-attack-18-packages-backdoored-to-steal-crypto-wallet-keys-qvukjacsf) · StepSecurity · 0 upvotes · 0 comments - [Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry](https://daily.dev/posts/compromised-injectivelabs-sdk-ts-exfiltrates-wallet-keys-through-fake-telemetry-gg1twczdh) · Aikido Security · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#crypto](https://daily.dev/tags/crypto), [#malware](https://daily.dev/tags/malware), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/injective-sdk-on-npm-infected-with-cryptocurrency-wallet-stealer-2u95ebyn1) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Injective SDK on npm infected with cryptocurrency wallet stealer","url":"https://daily.dev/posts/injective-sdk-on-npm-infected-with-cryptocurrency-wallet-stealer-2u95ebyn1","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/injective-sdk-on-npm-infected-with-cryptocurrency-wallet-stealer-2u95ebyn1"},"datePublished":"2026-07-09T20:12:25.461Z","dateModified":"2026-07-09T20:14:58.650Z","description":"Hackers compromised a GitHub account belonging to a legitimate Injective Labs contributor and used it to publish a malicious version (1.20.21) of the...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c61a8426bca861d421cb1b1c1acbf7d6?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c61a8426bca861d421cb1b1c1acbf7d6?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/injective-sdk-on-npm-infected-with-cryptocurrency-wallet-stealer-2u95ebyn1","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,crypto,malware,npm","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Injective SDK on npm infected with cryptocurrency wallet stealer"}]} ```