A sophisticated software supply-chain attack targeting developers using the Injective blockchain's software development kit has been uncovered by security researchers.