Injective has resolved security issues related to the npm package, and user funds have not been compromised

Injective's official account posted on social media that recent media reports have covered "potential security risks involving the Injective npm package." This issue has been promptly identified and resolved. User funds have never been at risk and have not suffered any losses.

The official statement indicated that its security monitoring system detected the issue immediately and quickly marked the affected package version as deprecated, while replacing it with a new version, thereby blocking the risk before the malicious package could be downloaded. As a result, the download count of the malicious package is zero, and it has not affected users, with user fund security remaining uncompromised. Injective's npm package is one of the most widely used SDKs in the cryptocurrency field, and the official team has now implemented optimization measures to ensure that such attack attempts cannot occur again.