Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2020/09/01 8:38 p.m.27 views

Malicious Package in dictum.js

Version 1.0.5 of dictum.js contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.5 of this module is found installed you will...

6.9AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/01 7:53 p.m.5 views

GHSA-4RX9-58M7-GR8W Malicious Package in css_transform_step

Version 1.0.6 of csstransformstep contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.6 of this module is found installed you...

7.1AI score
Exploits0References1
OSV
OSV
added 2020/09/01 7:51 p.m.12 views

GHSA-X9GM-QXHH-RF75 Malicious Package in cordova-plugin-china-picker

Version 1.0.910 of cordova-plugin-china-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.910 of this module is foun...

9.8CVSS7.1AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2020/09/01 7:50 p.m.20 views

Malicious Package in coffee-project

Version 1.7.5 of coffee-project contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.7.5 of this module is found installed you...

6.9AI score
Exploits0References2Affected Software1
Node.js
Node.js
added 2018/05/15 11:22 p.m.33 views

Malicious Package

Overview Version 1.0.910 of cordova-plugin-china-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.910 of this modul...

6.9AI score
Exploits0Affected Software1
Node.js
Node.js
added 2018/05/15 11:14 p.m.11 views

Malicious Package

Overview Version 0.0.4 of blingjs contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.4 of this module is found installed you...

6.9AI score
Exploits0Affected Software1
Node.js
Node.js
added 2018/05/15 11:4 p.m.13 views

Malicious Package

Overview Version 0.1.1 of angular-material-sidenav-rnd contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.1.1 of this module i...

6.9AI score
Exploits0Affected Software1
Rows per page
Query Builder