Malicious Package in jekyll-for-github-projects

Version 0.2.12 of jekyll-for-github-projects contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment...

GHSA-J5QG-46P9-W2RP Malicious Package in jekyll-for-github-projects

Version 0.2.12 of jekyll-for-github-projects contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment...

PT-2020-21359

Name of the Vulnerable Software and Affected Versions jekyll-for-github-projects version 0.2.12 Description The issue concerns malicious code in version 0.2.12 of jekyll-for-github-projects. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends...