GHSA-m5pf-5894-jmx7

Suggest an improvement
Source
https://github.com/advisories/GHSA-m5pf-5894-jmx7
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/09/GHSA-m5pf-5894-jmx7/GHSA-m5pf-5894-jmx7.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-m5pf-5894-jmx7
Published
2020-09-03T19:08:00Z
Modified
2023-07-25T20:37:38Z
Summary
Malicious Package in sailclothjs
Details

Version 1.2.6 of sailclothjs contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=

Recommendation

Remove the package from your environment. It's also recommended to evaluate your application to determine whether or not user data was compromised.

Users may consider a downgrade to 1.2.5

Database specific 
{
    "cwe_ids": [],
    "github_reviewed": true,
    "github_reviewed_at": "2020-08-31T18:47:11Z",
    "nvd_published_at": null,
    "severity": "CRITICAL"
}
References

Affected packages

npm / sailclothjs

Package

Name
sailclothjs
View open source insights on deps.dev
Purl
pkg:npm/sailclothjs

Affected ranges

Affected versions

1.*
1.2.6

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/09/GHSA-m5pf-5894-jmx7/GHSA-m5pf-5894-jmx7.json"