Skip to content
OpenAdvisories

Package · npm

stream-combine

1 known vulnerabilities.

1 result · Feed

  • Critical —

    Malicious Package in stream-combine

    Version 2.0.2 of `stream-combine` has malicious code design to steal credentials and credit card information. The code searches all form elements for passwords, credit card numbers and CVC codes. It then uploads the information to a remote server using HTML l…