Lucene search
K

31 matches found

Github Security Blog
Github Security Blog
added 2020/09/03 9:2 p.m.19 views

Malicious Package in json-serializer

Version 2.0.10 of json-serializer contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluate...

4.3AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/03 8:45 p.m.7 views

GHSA-P59G-6CQR-M73W Malicious Package in bmap

Version 1.0.3 of bmap contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.3 of this module is found installed you will want t...

9.8CVSS7.1AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 7:15 p.m.11 views

Malicious Package in pyramid-proportion

Version 1.0.5 of pyramid-proportion contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also...

6.9AI score
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/03 7:14 p.m.23 views

Malicious Package in ngx-context-menu

Version 0.0.26 of ngx-context-menu contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also...

7AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/03 7:12 p.m.19 views

GHSA-JF55-RGPX-P6RX Malicious Package in iie-viz

Version 1.0.4 of iie-viz contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also recommended...

7.2AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 7:8 p.m.18 views

Malicious Package in sailclothjs

Version 1.2.6 of sailclothjs contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also...

6.9AI score
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/03 7:6 p.m.15 views

Malicious Package in cal_rd

Version 0.1.1 of rccal contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also recommended t...

3.5AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/03 2:35 a.m.7 views

GHSA-48HW-37G6-3GW4 Malicious Package in mx-nested-menu

Version 0.1.30 of mx-nested-menu contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluat...

7.2AI score
Exploits0References1
OSV
OSV
added 2020/09/03 12:34 a.m.15 views

GHSA-GJC9-932X-C59P Malicious Package in leaflet-gpx

Version 1.0.1 of leaflet-gpx contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluate yo...

7.2AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 12:33 a.m.28 views

Malicious Package in jekyll-for-github-projects

Version 0.2.12 of jekyll-for-github-projects contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment...

7AI score
Exploits0References2Affected Software1
Veracode
Veracode
added 2020/09/02 5:13 a.m.11 views

Malicious Package

modlibrary is a malicious package. The package contains code that when executed in the browser, would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...

2AI score
Exploits0
Veracode
Veracode
added 2020/09/02 4:29 a.m.8 views

Malicious Package

s3asy is a malicious package. The package contains code that when executed in the browser, would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...

1.5AI score
Exploits0
Github Security Blog
Github Security Blog
added 2020/09/01 8:37 p.m.34 views

Malicious Package in nginxbeautifier

Version 1.0.14 of nginxbeautifier contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.14 of this module is found installed yo...

3AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/01 8:31 p.m.11 views

GHSA-4C87-GG2Q-FC6M Malicious Package in rc-calendar-jhorst

Version 8.4.3 of rc-calendar-jhorst contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 8.4.3 of this module is found installed y...

7.1AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/01 8:27 p.m.29 views

Malicious Package in json-serializer

Version 2.0.10 of json-serializer contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 2.0.10 of this module is found installed yo...

2.9AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/01 7:56 p.m.7 views

GHSA-92PX-Q4W8-HRR5 Malicious Package in impala

Version 1.1.7 of impala contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.1.7 of this module is found installed you will want...

9.8CVSS7.1AI score
Exploits0References3
OSV
OSV
added 2020/09/01 7:50 p.m.9 views

GHSA-3FV6-Q5XV-FHPW Malicious Package in coffee-project

Version 1.7.5 of coffee-project contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.7.5 of this module is found installed you...

7.1AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/01 7:49 p.m.52 views

Malicious Package in codify

Version 0.3.1 of codify contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.3.1 of this module is found installed you will want...

2.8AI score
Exploits0References4Affected Software1
OSV
OSV
added 2020/09/01 7:46 p.m.9 views

GHSA-8RXG-9G6F-VQ9P Malicious Package in another-date-range-picker

Version 4.1.48 of another-date-range-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 4.1.48 of this module is found...

9.8CVSS7.1AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2020/09/01 7:41 p.m.19 views

Malicious Package in @impala/bmap

Version 1.0.3 of @impala/bmap contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.3 of this module is found installed you wil...

2.9AI score
Exploits0References3Affected Software1
Rows per page
Query Builder