Icalurus$ 🦄Ссылка
We scoped the PRNG issue to make clear this is not a panic and patch now situation. In most wallets we reviewed, crypto-jsrandom was only used to generate IVs/salts for local seed encryption.
That said, crypto-js is deprecated and abandoned, which means both cryptographic and supply-chain risks. It should be replaced in any serious project.