4 matches found
Malicious Package in blingjs
Version 0.0.4 of blingjs contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.4 of this module is found installed you will wan...
GHSA-HFC6-79WV-5HPW Malicious Package in blingjs
Version 0.0.4 of blingjs contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.4 of this module is found installed you will wan...
PT-2020-21336
Name of the Vulnerable Software and Affected Versions blingjs version 0.0.4 Description The issue concerns malicious code in version 0.0.4 of blingjs that, when executed in a browser, can extract sensitive information from form fields, including password, cvc, and cardnumber, and send this data t...
Malicious Package
Overview Version 0.0.4 of blingjs contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.4 of this module is found installed you...