Skip to content
OpenAdvisories

Package · npm

smartsearchwp

1 known vulnerabilities.

Malicious versions reported for this package

1 result · Feed

  • Critical 9.8

    Malicious Package in smartsearchwp

    All versions of `smartsearchwp` contain malicious code. The package is malware intended to steal credentials from websites it is loaded in. It traverses DOM elements looking for fields such as `username` and `password` and uploads it to a remote server. The p…