WS-2019-0432

Grunt-radical, version 0.0.14 contains malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to "hps://js-metrics.com/minjs.php?pl="...

GHSA-4627-W373-375V Malicious Package in grunt-radical

Version 0.0.14 of grunt-radical contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluate...

Malicious Package in grunt-radical

Version 0.0.14 of grunt-radical contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluate...

PT-2020-21003

Name of the Vulnerable Software and Affected Versions grunt-radical version 0.0.14 Description The issue concerns malicious code in a specific version of the software. When executed in a browser, this code enumerates sensitive form fields such as password, cvc, and cardnumber, and sends the...