Injective SDK on npm infected with cryptocurrency wallet stealer

Published on July 9, 2026

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node Package Manager (npm) that stole cryptocurrency wallet private keys and mnemonic seed phrases. [...]

Continue reading on website
Other news

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

July 9, 2026
Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API."Operators rely on automated scraping tooling with custom or legitimate-sounding user agents, leveraging GitHub 'ghost' accounts that are often years old, or compromised OAuth tokens and personal

OpenMandriva Linux says contributor tried to sabotage the project

July 9, 2026
The OpenMandriva Linux project announced that it was the target of an attempted act of internal sabotage after a dispute among contributors. [...]