npm install of backdoored @injectivelabs/sdk-ts@1.20.21

Ethan Andrews@eandrews

•updated Jul 9, 2026•12•0•16

Detects the installation or referencing of the malicious @injectivelabs/sdk-ts package version 1.20.21. This specific version was identified as containing a credential-stealing backdoor disguised within telemetry code.