Injective: The npm package-related security issue has been resolved, and users’ funds have not suffered any loss

robot
Abstract generation in progress

BlockBeats message. July 11. Injective official posted on social media saying that recently, some media reported a news about “potential security vulnerabilities involving the Injective npm software package.” The issue has now been immediately identified and resolved. User funds were never at risk and no losses were incurred.

The official stated that its security monitoring system detected the issue at the first moment and quickly marked the affected software package versions as deprecated, while replacing them with new versions, thereby blocking the risk before any malicious package could be downloaded. Therefore, the malicious software package had zero downloads and did not affect users, and users’ funds safety was not threatened.

Injective’s npm packages are among the most widely used SDKs in the cryptocurrency sector. The official has now implemented optimization measures to ensure that attempts like this will not happen again.

INJ2.13%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pinned