What 45% Means: Securing the Code Your AI Agents Just Wrote

@injectivelabs/sdk-ts version 1.20.21, published to npm on June 8, 2026 and disclosed by Socket's research team on July 9, 2026, is a malicious release of the official Injective Labs TypeScript SDK that exfiltrates wallet private keys and mnemonic phrases through a disguised telemetry function. The compromised version hooked the SDK's wallet-generation code, so any application that derived a wallet while running it had that wallet's secret material sent to an attacker-controlled endpoint. No CVE has been assigned to this incident as of publication; it is tracked as a malicious npm package release.

This post covers what happened, how the payload executed, every affected package and version, the indicators of compromise, and the first-hour response steps for any team with @injectivelabs/sdk-ts or another @injectivelabs-scoped package in its dependency tree

Attack Summary

• Affected package: @injectivelabs/sdk-ts
• Malicious version: 1.20.21
• Clean version: 1.20.23
• Ecosystem: npm
• Vulnerability class: wallet private key and mnemonic theft via a disguised telemetry function

• Weekly downloads: approximately 50,000

• Dependent packages: 87

• Malicious version downloads: 310

• Disclosed by: Socket Security, July 9, 2026

• CVE: none assigned as of publication

‍

Background

@injectivelabs/sdk-ts is the official TypeScript SDK for Injective Labs Cosmos-based Layer-1 chain. It is the standard library node services, exchanges, and wallets use to derive addresses, build transactions, and query the chain, which is why a compromise in its wallet-generation path has outsized reach across the Injective ecosystem. The package sits in the dependency tree of dozens of downstream Injective tooling packages, so teams can be exposed even when they never installed it directly.

‍