CVE-2018-1000851

Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability...

EUVD-2018-2038

Malware in sbrugna...

MAL-2022-2182 Malicious code in copay-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c08757a964e749fe204c6d6565affce02ca8794aa3e72e9bc4a13954ec46f5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in copay-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c08757a964e749fe204c6d6565affce02ca8794aa3e72e9bc4a13954ec46f5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in copay-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f20d158ba57ad187adca14a69f84c2711876c40cb9d8b80c9ed1913e2a9ecc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2183 Malicious code in copay-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f20d158ba57ad187adca14a69f84c2711876c40cb9d8b80c9ed1913e2a9ecc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2181 Malicious code in copay-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78dc665e4ca62bb2de8511e966182acbab953192bb763b48df6cc5b4ee8b7b27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in copay-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78dc665e4ca62bb2de8511e966182acbab953192bb763b48df6cc5b4ee8b7b27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in copay-whitepaper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f565f189934fb947f3e16c26e2540927d06043c6ec62bb5b9ae1f2f7c7c4b9a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2184 Malicious code in copay-whitepaper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f565f189934fb947f3e16c26e2540927d06043c6ec62bb5b9ae1f2f7c7c4b9a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Copay Bitcoin Wallet Security Breach

Copay Bitcoin Wallet is a bitcoin wallet platform for desktop and mobile devices. A security vulnerability exists in the wallet private key storage in Copay Bitcoin Wallet versions 5.01 through 5.1.0. An attacker could exploit this vulnerability to obtain a user's private key...

Malicious Package in flatmap-stream

Version 0.1.1 of flatmap-stream is considered malicious. This module runs an encrypted payload targeting a very specific application, copay and because they shared the same description it would have likely worked for copay-dash. The injected code: - Read in AES encrypted data from a file disguise...

GHSA-9X64-5R7X-2Q53 Malicious Package in flatmap-stream

Version 0.1.1 of flatmap-stream is considered malicious. This module runs an encrypted payload targeting a very specific application, copay and because they shared the same description it would have likely worked for copay-dash. The injected code: - Read in AES encrypted data from a file disguise...

CVE-2018-1000851

Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability...

CVE-2018-1000851

Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability...

Design/Logic Flaw

Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability...

CVE-2018-1000851

Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability...

CVE-2018-1000851

CVE-2018-1000851 affects Copay Bitcoin Wallet versions 5.01–5.1.0, with a vulnerability in wallet private key storage that can allow an attacker to compromise users’ private keys. The issue appears to be exploitable by running malicious code at startup. Remediation is to upgrade to 5.2.0 and late...

Rogue Developer Infects Widely Used NodeJS Module to Steal Bitcoins

A widely used third-party NodeJS module with nearly 2 million downloads a week was compromised after one of its open-source contributor gone rogue, who infected it with a malicious code that was programmed to steal funds stored in Bitcoin wallet apps. The Node.js library in question is...

Malicious Cryptocurrency Theft

[email protected] is a malicious package. The package displays malicious activities when imported from event-stream, and when used with cryptocurrenty related libraries such as copay-dash where the malicious code in flatmap-stream steals "hot" wallet profiles that were stored from mobile apps,...