A popular JavaScript cryptography library is vulnerable in a way which could allow threat actors to break into user accounts.
Charlie Eriksen, a researcher at Aikido, identified the infected libraries and confirmed each detection manually to minimize ...