Socket found a compromised Injective npm package stealing wallet keys amid rising crypto supply chain attacks.
Unknown attackers compromised Injective Labs' GitHub repo to publish npm package 1.20.21, which steals wallet private keys ...