A hacker has gained (legitimate) access to a popular JavaScript ... this malicious code lays dormant until it's used inside the source code of Copay, a desktop and mobile wallet app developed ...