MAL-2026-12088 Malicious code in @wethenorth12/bitcoinjs-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f602036ff9f524298056528fbec6c58c9fb66ea2686bec418694b5854aeea4 On require, index.js collects the full process.env object together with hostname, username, home directory, platform, current working directory, and ...

MAL-2026-12106 Malicious code in @wethenorth12/web3-provider-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f54c89c6e669f4a9e1e2939e09b5ac809507f98df451e239add607d417f394a Package name mimics MetaMask's official web3-provider-engine and its README advertises a drop-in replacement, but the exported API...