Cybersecurity researchers uncover fake Bitcoin npm packages that steal crypto wallets and seeds
Jan 8, 2026
< 1 min read
by Florence Muchai
for CryptoPolitan

Share:
Researchers at Zscaler ThreatLabz have found three malicious Bitcoin npm packages that are meant to implant malware named NodeCordRAT. Reports say that they all got more than 3,400 downloads before they were taken down from the npm registry. The packages, which include bitcoin-main-lib, bitcoin-lib-js, and bip40, had amassed 2,300, 193, and 970 downloads. By copying […]
