Malicious versions reported for this package
- MAL-2025-16440 — all versions · Aug 14, 2025
1 result · Feed
-
Critical 9.8
Malicious Package in cal_rd
Version 0.1.1 of `rc_cal` contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to `https://js-metrics.com/minjs.php?pl=` ## Recommendation Remove the package …