Malicious code in @zzzgenesis00/bitcoinjs-wallet (npm)

Source: amazon-inspector bcabff22bb09847474002e52ef9e8101a847fe662fcf18eec0617fd6e9829e20 This package is a typosquat of the bitcoinjs-wallet ecosystem. Its index.js is a thin passthrough while the malicious behavior is in postinstall.js, which runs automatically on npm install. The postinstall...

Malicious code in bitcoinjs-wallet (npm)

Source: amazon-inspector 8981a1bdc42ac6f595b3805c959060201fc4eb0c39b5bf50b25c5d3d7cc398b5 [email protected] is a typosquat of bitcoinjs-lib that performs credential theft at module load. On require, index.js collects hostname, username, homedir, platform, cwd and the entire process.env,...

Malicious Package

Overview bitcoinjs-wallet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...