PrivacySignal
Analysis ← Front page
Breach

Injective SDK on npm infected with cryptocurrency wallet stealer

BleepingComputer · · International · Data Breaches

Attackers breached the GitHub repository of Injective Labs and used that access to push a malicious version of the project's SDK to npm, the widely used JavaScript package registry. The tampered package was designed to silently harvest cryptocurrency wallet private keys and seed phrases from developers who installed it.

Why this matters: This is a supply chain attack, which means the damage travels through trust. Developers installed what looked like a legitimate, official package. The theft happened quietly, in the background, before anyone knew something was wrong. Private keys and seed phrases are not like passwords you can reset. Lose them and your funds are gone. The real exposure here is not just to individual developers — it is to any application or service built on top of that SDK. One compromised repository can ripple into thousands of projects.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach
Read the original at BleepingComputer → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

Breach
DataBreaches.net · · International

Connecticut says data from 41,000 Medicaid members exposed in portal breach; the second portal incident this year

Connecticut's Medicaid provider portal suffered a breach exposing payment and claims data for roughly 41,000 HUSKY Health members, detected on June 25, 2026. The vendor Gainwell Technologies, which manages the state's Medicaid fiscal operations, is at the center of the incident — the second portal breach Connecticut has reported this year.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
BleepingComputer · · International

Hackers infect Android car head units with proxy botnet malware

A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses them for ad fraud. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
CyberScoop · · US Federal

Apollo discloses data breach from ongoing wave of attacks hitting financial sector

Apollo, a major private equity firm, disclosed that attackers accessed some of its cloud platforms over a five-day window in early July, exposing sensitive personal data. The breach is part of a broader wave of cyberattacks targeting financial sector firms.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

#breach#privacy Read original →
Breach
DataBreaches.net · · International

Troutman Pepper Locke Silent as Threat Actors Leak Client Data, Tens of Thousands of SSNs

In April, Silent Ransom Group’s (SRG)* leak site listed 38 law firms that had not paid them and whose data was leaked. By June 29, there were 48 law firms. Now there are 64, and, in somewhat surprising claims, SRG says a recent attack was actually its second on one law firm, and they will... Source

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
The Record · · International

U.S. Bank says breach claims related to fourth-party incident

U.S. Bank has acknowledged claims of a data breach but says the incident originated with a fourth-party vendor, not its own systems. The bank states there is no evidence that its internal networks or data repositories were directly compromised.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
BleepingComputer · · International

Hundreds of leaked AWS keys give full control over corporate accounts

More than 9,300 AWS access keys exposed publicly over a four-year period remain active and valid, giving anyone who finds them full control over the corporate cloud accounts they belong to. The keys were accessible between August 2022 and August 2026.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →