Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2020/09/01 8:33 p.m.•45 views

Malicious Package in react-server-native

Version 0.0.7 of react-server-native contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.7 of this module is found installed...

6.9AI score
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/01 8:33 p.m.•20 views

GHSA-FWVP-X5GJ-773J Malicious Package in react-server-native

Version 0.0.7 of react-server-native contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.7 of this module is found installed...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/09/01 12:00 a.m.•2 views

PT-2020-21287

Name of the Vulnerable Software and Affected Versions react-server-native version 0.0.7 Description The issue concerns malicious code in version 0.0.7 of react-server-native that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms...

5.8AI score
SaveExploits0References2
nodejs
nodejs
•added 2018/05/15 11:46 p.m.•29 views

Malicious Package

Overview Version 0.0.7 of react-server-native contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.7 of this module is found...

6.9AI score
SaveExploits0Affected Software1
Rows per page
Query Builder