Injective: Security issue related to npm packages has been resolved, and no user funds were lost.

Injective’s official team posted on social media that recent media reports covered potential security vulnerabilities involving Injective’s npm packages. The issue was immediately detected and resolved. User funds were never at risk and suffered no losses. According to the official, its security monitoring system flagged the problem in real time, quickly marked the affected package versions as deprecated, and replaced them with new versions—blocking the risk before the malicious package could be downloaded. As a result, the malicious package had zero downloads, caused no harm to users, and user fund security remained uncompromised. Injective’s npm package is among the most widely used SDKs in the cryptocurrency sector. The team has now implemented optimization measures to prevent such attack attempts from recurring.