Fri. Dec 14th, 2018

Hacker gains access to the repo of Event-Stream, a JS library with 2M+ weekly downloads on npm.org, to inject BitPay’s wallet apps with code that steals funds (Catalin Cimpanu/ZDNet)

Hacker gains access to the repo of Event-Stream, a JS library with 2M+ weekly downloads on npm.org, to inject BitPay’s wallet apps with code that steals funds (Catalin Cimpanu/ZDNet)

Catalin Cimpanu / ZDNet:
Hacker gains access to the repo of Event-Stream, a JS library with 2M+ weekly downloads on npm.org, to inject BitPay’s wallet apps with code that steals funds  —  Users of BitPay’s Copay desktop and mobile wallet apps are affected.  An update has been released earlier today that doesn’t contain the malicious code.

Source: http://www.techmeme.com/181126/p22#a181126p22

Leave a Reply

Your email address will not be published. Required fields are marked *