PT-2026-125878

🚨 MAJOR SECURITY ALERT: bitcoinjs patches multiple high security issues in their packages We hit some of the most critical infrastructure in Bitcoin is dependent on bitcoinjs packages—bitcoinjs-lib, bip39, tiny-secp256k1 were affected are ato multiple high security issues affecting major wallets,...

Malicious Package

Overview psbt-helpers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in psbt-helpers (PyPI)

Source: kam193 394dea9d587ac1affba13c45ecfc28f5d005b2cb5f8b665dcf4591b60085a8ae The code advertised as a firmware upgrader for hardware wallets in fact downloads an infostealer. The stealer searches the machine for cryptocurrency sensitive data wallet files, seeds, browser data passwords, cookies...

Malicious code in psbt-utils (PyPI)

Source: kam193 5424e50d87f8c14eb7d0d37d4c98e86a1c06fb3613a66fd9af2e9ab6fd611938 The code advertised as a firmware upgrader for hardware wallets in fact downloads an infostealer. The stealer searches the machine for cryptocurrency sensitive data wallet files, seeds, browser data passwords, cookies...

Malicious Package

Overview psbt-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-11521 Malicious code in psbt-helpers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82a309d768af6a39f95bb4f7c9f5d8548a95f0074613985f49f0513420dae9fa The code advertised as a firmware upgrader for hardware wallets in fact downloads an infostealer. The stealer searches the machine for cryptocurrency sensitive...

Malicious code in psbt-helpers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82a309d768af6a39f95bb4f7c9f5d8548a95f0074613985f49f0513420dae9fa The code advertised as a firmware upgrader for hardware wallets in fact downloads an infostealer. The stealer searches the machine for cryptocurrency sensitive...

bitcoin-core:psbt: Use-of-uninitialized-value in CPubKey::IsFullyValid

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=4958498419507200 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: psbt Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

bitcoin-core:psbt: Use-of-uninitialized-value in CPubKey::GetID

Detailed Report: https://oss-fuzz.com/testcase?key=5401747779092480 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: psbt Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CPubKey::GetID CreateSig SignStep...