Malicious Package in radic-util

Version 1.0.2 of radic-util contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluate you...

GHSA-8QH7-XW58-3WW7 Malicious Package in radic-util

Version 1.0.2 of radic-util contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluate you...

PT-2020-21174

Name of the Vulnerable Software and Affected Versions radic-util version 1.0.2 Description The issue concerns malicious code in the radic-util package that, when executed in a browser, can extract sensitive information such as password, cvc, and card number fields from forms. This information is...