It isn't only inside BitPay's Copay wallet apps but all crypto wallets, in general, that use Javascript. Don't worry Copay isn't the only one and you can expect to hear more about it and people with lost funds, in a few days.