Lucene search
K

9 matches found

Github Security Blog
Github Security Blog
added 2020/09/03 7:6 p.m.16 views

Malicious Package in cal_rd

Version 0.1.1 of rccal contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also recommended t...

3.5AI score
Exploits0References2Affected Software1
Veracode
Veracode
added 2020/09/02 2:13 a.m.6 views

Malicious Package

dynamo-schema is a malicious package. The package contains code that when executed in the browser, would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...

1.5AI score
Exploits0
OSV
OSV
added 2020/09/01 8:34 p.m.7 views

GHSA-3WJM-33MW-H388 Malicious Package in s3asy

Version 0.4.8 of s3asy contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.4.8 of this module is found installed you will want ...

7.1AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/01 8:32 p.m.32 views

Malicious Package in react-dates-sc

Version 0.3.0 of react-dates-sc contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.3.0 of this module is found installed you...

6.9AI score
Exploits0References2Affected Software1
Veracode
Veracode
added 2019/08/08 1:29 a.m.13 views

Malicious Package

device-mqtt is a malicious package. The package contains a malicious code which will execute in the browser, steal sensitive information such as password, cvc, cardnumber fileds from forms and send to https://js-metrics.com/minjs.php?pl=...

1.1AI score
Exploits0
Veracode
Veracode
added 2019/08/06 9:12 a.m.9 views

Malicious Package

sailclothjs is malicious package. The package contains a malicious code which will steal sensitive information such as password, cvc, cardnumber fileds from forms and send to https://js-metrics.com/minjs.php?pl=...

0.6AI score
Exploits0
Veracode
Veracode
added 2019/08/06 8:56 a.m.12 views

Malicious Package

uploader-plugin is a malicious package. The package contains a malicious code which will steal sensitive information such as password, cvc, cardnumber fileds from forms and send to https://js-metrics.com/minjs.php?pl=...

0.5AI score
Exploits0
Veracode
Veracode
added 2019/06/10 3:56 a.m.7 views

Malicious Package

grunt-radic contains malicious code. The code when executed in the browser would capture password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...

6.9AI score
Exploits0
Veracode
Veracode
added 2019/06/10 3:55 a.m.10 views

Malicious Package

ember-power-timepicker contains malicious code. The code when executed in the browser would capture password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...

6.9AI score
Exploits0
Rows per page
Query Builder