Malicious code in @wethenorth12/bip39-mnemonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b607f30d6abb6d568a9a52ff027cea51c7a1efccc54c2fa59a8acc2d6f0386 On require of the package's main entrypoint, the module collects hostname, username, home directory, platform, cwd, and the entire process.env,...

MAL-2026-12096 Malicious code in @wethenorth12/hdkey-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e9eb2c497323415e826c9de190e636c2dea959708898550db20676d0c1ae6da index.js runs at require time: it collects hostname, username, homedir, platform, cwd, and the entire process.env, JSON-serializes and base64-encodes...