WS-2019-0386

@fangrong/xoc version 1.0.6 contains malicious code which steals sensitive information such as cardnumbers and passwords from forms in the browser and send them to "hps://js-metrics.com/minjs.php?pl="...