MAL-2026-13211 Malicious code in @zzzcrypto/bitcoin-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d633d3efb27db376be57d77ebbd808db458d088503adebe2f7ad7501281dd1 On require, index.js serializes process.env together with hostname, username, homedir, platform, cwd, and a timestamp, base64-encodes the JSON, and...

MAL-2026-12088 Malicious code in @wethenorth12/bitcoinjs-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f602036ff9f524298056528fbec6c58c9fb66ea2686bec418694b5854aeea4 On require, index.js collects the full process.env object together with hostname, username, home directory, platform, current working directory, and ...

Malicious code in bitcoinjs-lib-v5 (npm)

--- -= Per source details. Do not edit below this line.=-...

Randstorm Exploit: Bitcoin Wallets Created b/w 2011-2015 Vulnerable to Hacking

Bitcoin wallets created between 2011 and 2015 are susceptible to a new kind of exploit called Randstorm that makes it possible to recover passwords and gain unauthorized access to a multitude of wallets spanning several blockchain platforms. "Randstorm is a term we coined to describe a collection...

Malicious code in bitcoinjs-lib-bigint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee5abe0014de83de3d111ab01e42e93f93afb0456186973c93615ac2bdcbcd00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...