Injective Labs GitHub Repository Compromised

Unknown attackers have compromised the GitHub repository of the Injective Labs SDK project and published a malicious package in the npm registry. This package, version @injectivelabs/sdk-ts@1.20.21, was designed to steal private keys and mnemonic seed phrases from cryptocurrency wallets. The attackers exploited the compromise to exfiltrate fake telemetry data originating from users' wallets. The vulnerability was discovered after users reported unexpected activities in their wallets. The malicious version of the SDK was equipped with a function that pretended to collect telemetry data but actually siphoned off sensitive information.

This poses a significant risk to the security of crypto users, as private keys and seed phrases are essential for accessing wallets. The Injective Labs developers promptly responded to the incident by removing the compromised version from the npm registry. Users were urged to check their wallets and change their keys if necessary to protect against potential losses. Security measures have been strengthened to prevent future attacks. The attackers appear to be specifically targeting the growing number of users active on DeFi platforms (Decentralized Finance).

These platforms are particularly vulnerable to such attacks as they often rely on open-source software maintained by a broad developer community. The compromise of the Injective Labs SDK is not the first incident of its kind and could raise further security concerns within the crypto community. The security firm investigating the incident has already released preliminary analyses indicating that the attackers may have gained access through vulnerabilities in GitHub repository management. The exact method by which the attackers infiltrated the repository is still under investigation.

Experts advise developers to regularly check their repositories for suspicious activities. Incidents in the cryptocurrency sector are on the rise, and the security landscape is becoming increasingly complex. According to a recent study, over $1.5 billion has already been lost to hacks and security incidents in the crypto sector by 2026. This underscores the need for robust security practices and regular audits in software development. Injective Labs has announced plans to revise their security protocols and implement additional measures to ensure the integrity of their software.

This includes the introduction of multi-factor authentication processes and code changes being reviewed by multiple developers. These steps aim to minimize the risk of future compromises. The community has responded mixed to the incidents, with some users calling for more transparency from developers while others shift the responsibility to the platforms providing such software. The discussion around security standards in crypto development is expected to intensify, especially following this incident.

Injective Labs is committed to supporting affected users and providing resources to enhance the security of their wallets. Users are encouraged to review their security practices and stay informed about the latest developments in crypto security. The vulnerability has already led to an increase in inquiries for security solutions within the crypto community. The exact number of affected users is currently unknown, but it is estimated that several thousand wallets may be at risk. Injective Labs is working closely with security researchers to assess the impact of the incident and take appropriate measures.

The community will be informed of further developments. The vulnerability and associated risks are another example of the challenges facing the crypto industry. Experts warn that such incidents could become more frequent in the future if adequate security measures are not implemented. Injective Labs has announced plans to update their security protocols by the end of July 2026.