BlockBeats News, July 11th, Injective's official announcement on social media stated that recent media reports on the "potential security vulnerability involving the Injective npm package" have been addressed. The issue was promptly identified and resolved. User funds were never at risk and no losses were incurred.

The official announcement mentioned that their security monitoring system quickly detected the issue and promptly flagged the affected package versions as deprecated. They were then replaced with new versions, thus mitigating the risk before the malicious package could be downloaded. As a result, the download count of this malicious package was zero, causing no impact on users and posing no threat to user funds.

Injective's npm package is one of the most widely used SDKs in the cryptocurrency field. The official team has now implemented optimization measures to ensure that such attempted attacks will not occur again.