@injectivelabs/sdk-ts

Named by 3 kept items in this workspace.

Search every workspace for @injectivelabs/sdk-ts. It matches the name as written, so it can find other things that share it.

The items that name it 3

Injective npm Supply Chain Attack: 18 Packages Backdoored to Steal Crypto Wallet Keys
writeup2026-07-12
Injective Labs' official TypeScript SDK for building applications on the Injective blockchain (wallets, DEX frontends, trading bots, indexers); malicious version 1.20.21 published July 8, 2026, contained the backdoor; fixed in 1.20.23 published ~49 minutes later
Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry
writeup2026-07-09
Contains the stealer payload; clean version is 1.20.23
Compromised Injective SDK npm Package Exfiltrates Wallet Keys and Mnemonics
advisory2026-07-09
Malicious/compromised version; part of Injective Labs TypeScript SDK, ~50,000 weekly downloads, 87 dependent packages

All technologies in this workspace.