Lucene search
K

4 matches found

OSV
OSV
added 2020/09/11 9:21 p.m.13 views

GHSA-2XW5-3767-QXVM Malicious Package in ng-ui-library

Version 1.0.987 of ng-ui-library contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluat...

9.8CVSS7.2AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/11 9:21 p.m.28 views

Malicious Package in ng-ui-library

Version 1.0.987 of ng-ui-library contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluat...

4.3AI score
Exploits0References2Affected Software1
Veracode
Veracode
added 2019/06/10 3:55 a.m.7 views

Malicious Package

ng-ui-library contains malicious code. The code when executed in the browser would get password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...

6.9AI score
Exploits0
Node.js
Node.js
added 2019/06/07 7:20 p.m.12 views

Malicious Package

Overview Version 1.0.987 of ng-ui-library contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment an...

7AI score
Exploits0Affected Software1
Rows per page
Query Builder