Skip to content
OpenAdvisories

Package · npm

cordova-plugin-china-picker

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-x9gm-qxhh-rf75

    Malicious Package in cordova-plugin-china-picker

    Version 1.0.910 of `cordova-plugin-china-picker` contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to `https://js-metrics.com/minjs.php?pl=` ## Recommendat…

    cordova-plugin-china-picker npm