---
id: 2293
title: "Bug Bytes for November 30: Cyber Criminals Never Sleep"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/bug-bytes-for-november-30-cyber-criminals-never-sleep/"
published_at: "2018-11-30T00:00:00Z"
tags: ["supply-chain", "javascript", "usps", "wannacry", "bug-bytes", "weekly-roundup", "routers"]
phying_url: "https://phying.com/item/2293"
lang: en
---

# Bug Bytes for November 30: Cyber Criminals Never Sleep

## Summary

Weekly roundup: a trojanized JavaScript library stole Bitcoin wallet credentials, a broken USPS API exposed data on 60 million users, and Germany drafted security rules for home routers.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2018-11-30T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/bug-bytes-for-november-30-cyber-criminals-never-sleep/
- **Phying News:** https://phying.com/item/2293