PT-2020-21215

Name of the Vulnerable Software and Affected Versions flatmap-stream version 0.1.1 Description The issue concerns a malicious version of the flatmap-stream module, which targets specific applications, including copay and potentially copay-dash, by running an encrypted payload. This payload reads...

Malicious Cryptocurrency Theft

[email protected] is a malicious package. The package displays malicious activities when imported from event-stream, and when used with cryptocurrenty related libraries such as copay-dash where the malicious code in flatmap-stream steals "hot" wallet profiles that were stored from mobile apps,...