Global Bitcoin payment service BitPay reportedly has warned customers of a vulnerability on a third-party NodeJS package which could be used to capture users’ private keys. The company said the malicious code was deployed on versions 5.0.2 through 5.1.0 of its Copay and BitPay apps. The company is currently investigating the matter and recommended users to move funds to new wallets immediately. In April 2018, BitPay issued a warning of a trojan horse called Coinbitclip which has affected some purchases using Bitcoin processed by the payment service. (RL)
