Lucene search
+L

6 matches found

Mend
Mend
•added 2026/05/14 9:18 a.m.•1 views

WS-2019-0472

sailclothjs v1.2.6 contains malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...

9.3CVSS6AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/03 7:08 p.m.•31 views

Malicious Package in sailclothjs

Version 1.2.6 of sailclothjs contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also...

6.9AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/03 7:08 p.m.•14 views

GHSA-M5PF-5894-JMX7 Malicious Package in sailclothjs

Version 1.2.6 of sailclothjs contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/09/03 12:00 a.m.•1 views

PT-2020-21392

Name of the Vulnerable Software and Affected Versions sailclothjs version 1.2.6 Description The issue concerns malicious code in sailclothjs that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This extracted data is then sen...

5.8AI score
SaveExploits0References2
Veracode
Veracode
•added 2019/08/06 9:12 a.m.•18 views

Malicious Package

sailclothjs is malicious package. The package contains a malicious code which will steal sensitive information such as password, cvc, cardnumber fileds from forms and send to https://js-metrics.com/minjs.php?pl=...

0.6AI score
SaveExploits0
nodejs
nodejs
•added 2019/08/05 10:03 p.m.•26 views

Malicious Package

Overview Version 1.2.6 of sailclothjs contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's als...

7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder