Hackers attempted to backdoor Injective npm package to steal crypto wallet keys

Researchers at Socket discovered that hackers attempted to inject a backdoor into an npm package linked to the Injective blockchain in order to steal private wallet keys. The incident is particularly significant for developers and applications that handle Injective wallet workflows. The attack highlights the growing threat to software supply chain security within the Web3 ecosystem.