Scaryshit.js
This is an evil little script that will add an “onsubmit” event to forms that includes a password field. It will then use a GET request using AJAX when the user submits and send the data to a logger somewhere, leaving the user completely unknowing of the theft! Conclusion: A sophisticated AJAX credential logger.
More+