4 matches found
Malicious Package in simple-alipay
Version 1.0.1 of simple-alipay contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.1 of this module is found installed you wi...
GHSA-3WH2-2PP3-2823 Malicious Package in simple-alipay
Version 1.0.1 of simple-alipay contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.1 of this module is found installed you wi...
PT-2020-20995
Name of the Vulnerable Software and Affected Versions simple-alipay version 1.0.1 Description The issue concerns malicious code in version 1.0.1 of the simple-alipay module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and send...
Malicious Package
Overview Version 1.0.1 of simple-alipay contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.1 of this module is found install...