Injective SDK on npm infected with cryptocurrency wallet stealer
Teaser from the source
Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node Package Manager (npm) that stole cryptocurrency wallet private keys and mnemonic seed phrases. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on cryptocurrency
Other advisories
- HighCVE-2026-93885Blackworks1 Cryptocurrency Donation Box: Cross-Site-Scripting (XSS)
- HighCVE-2026-93885Das WordPress-Plugin Cryptocurrency Donation Box – Bitcoin & Crypto Donations ist anfällig für Cross-Site Scripting (XSS) in der gespeichert...
- HighCVE-2026-93885The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data_object Parameter in a…
- MediumCVE-2026-107420Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway <= 1.7.2 versions.
- HighCVE-2026-48486Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment (PoC+) consensus algorithm. Prior to version 3.9.9, an integ…
- Not ratedosv:CVE-2026-78391Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook
- HighCVE-2026-78391RansomLook contains a stored cross-site scripting (XSS) vulnerability in the cryptocurrency wallet detail view. Cryptocurrency addresses and blockchain names…
- Not ratedsingcert:ad-2026-010SPF-CSA Joint Advisory On Cryptocurrency Scams Involving Fake Job Offers And Compromised Software Systems
Other news entries
- FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From BinanceNewsSecurityWeek
- New N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedNewsBleepingComputer
- Binance warns of iOS flaw that could leak crypto wallet secretsNewsBleepingComputer
- Ukraine dismantles crypto scam network that stole €4.3 millionNewsBleepingComputer
- MetaMask says recent attack didn't affect wallet infrastructureNewsBleepingComputer
- NIKKE PC game launcher hacked to spread remote access, data-stealing malwareNewsBleepingComputer
- US charges two Canadians accused of hacking US universitiesNewsBleepingComputer
- Canadian Extradited to US Over Cryptomining Hacks on University SupercomputersNewsSecurityWeek
ID