A vulnerability has been found in https://mydashwallet.org/

[dashpay]

please do NOT use the wallet until further notice !
(externally loaded JS sending private keys to a remote server)