Injective resolves npm package compromise in under an hour with zero user impact

What happened

Attackers hijacked a maintainer's GitHub account to publish malicious code designed to steal private keys, but security firms caught it before real damage was done. A compromised maintainer account, 18 tainted npm packages, and a payload designed to siphon private keys and.