Hacker gains access to the repo of Event-Stream, a JS library with 2M+ weekly downloads on npm, to inject BitPay's wallet apps with code that steals funds (Catalin Cimpanu/ZDNet)

studypoint 13:31 Techmeme

Catalin Cimpanu / ZDNet:
Hacker gains access to the repo of Event-Stream, a JS library with 2M+ weekly downloads on npm, to inject BitPay's wallet apps with code that steals funds — Users of BitPay's Copay desktop and mobile wallet apps are affected. An update has been released earlier today that doesn't contain the malicious code.

from Techmeme https://ift.tt/2Ky4bQo

No comments

Subscribe to: Post Comments ( Atom )