Node/Bun process accessing crypto wallet extension and desktop wallet data

Adarsh Pandey@Pandeyadarsh

•updated today•2•0•2

Detects node, node.exe, bun, or bun.exe processes accessing multiple cryptocurrency wallet stores or browser data paths, which is indicative of credential theft or cryptocurrency wallet theft via malicious JavaScript/Node applications.