Lucene search
K

4 matches found

OSV
OSV
added 2020/09/11 9:21 p.m.13 views

GHSA-2XW5-3767-QXVM Malicious Package in ng-ui-library

Version 1.0.987 of ng-ui-library contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluat...

9.8CVSS7.2AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 12:33 a.m.28 views

Malicious Package in jekyll-for-github-projects

Version 0.2.12 of jekyll-for-github-projects contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment...

7AI score
Exploits0References2Affected Software1
Veracode
Veracode
added 2020/09/02 4:45 a.m.7 views

Malicious Package

json-serializer is a malicious package. The package contains code that when executed in the browser, would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...

1.5AI score
Exploits0
Node.js
Node.js
added 2019/06/07 7:1 p.m.10 views

Malicious Package

Overview Version 1.0.8 of ember-power-timepicker contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your...

7AI score
Exploits0Affected Software1
Rows per page
Query Builder