MAL-2025-16167 Malicious code in bridge-jalapeno-cws5 (npm)

The package bridge-jalapeno-cws5 was found to contain malicious code...

MAL-2025-37678 Malicious code in umbrella-bridge-ni8q (npm)

The package umbrella-bridge-ni8q was found to contain malicious code...

Malicious code in tools-bridge (npm)

The package tools-bridge was found to contain malicious code...

Malicious code in test-syncfusion-bridge (npm)

The package test-syncfusion-bridge was found to contain malicious code...

MAL-2025-14660 Malicious code in app-bridge-core (npm)

The package app-bridge-core was found to contain malicious code...

MAL-2025-16168 Malicious code in bridge-juniper-vy43 (npm)

The package bridge-juniper-vy43 was found to contain malicious code...

MAL-2025-17335 Malicious code in com.microsoft.mixedreality.toolkit.figmabridge (npm)

The package com.microsoft.mixedreality.toolkit.figmabridge was found to contain malicious code...

MAL-2025-9710 Malicious code in @yotpo-platform-packages/platform-bridge (npm)

The package @yotpo-platform-packages/platform-bridge was found to contain malicious code...

Malicious code in tangerine-bridge-t7tn (npm)

The package tangerine-bridge-t7tn was found to contain malicious code...

MAL-2025-16166 Malicious code in bridge-date-tc6d (npm)

The package bridge-date-tc6d was found to contain malicious code...

MAL-2025-16169 Malicious code in bridge-xigua-zzn5 (npm)

The package bridge-xigua-zzn5 was found to contain malicious code...

MAL-2025-21494 Malicious code in gitter-irc-bridge (npm)

The package gitter-irc-bridge was found to contain malicious code...

MAL-2025-26902 Malicious code in mushroom-bridge-v60l (npm)

The package mushroom-bridge-v60l was found to contain malicious code...

MAL-2025-38523 Malicious code in vk-teams-bridge (npm)

The package vk-teams-bridge was found to contain malicious code...

MAL-2025-37050 Malicious code in tools-bridge (npm)

The package tools-bridge was found to contain malicious code...

MAL-2025-26917 Malicious code in mutiapp-hybrid-bridge (npm)

The package mutiapp-hybrid-bridge was found to contain malicious code...

CVE-2025-50861

The CVE-2025-50861 entry affects the Lotus Cars Android App (com.lotus.carsdomestic.intl) version 1.2.8, where the exported component PushDeepLinkActivity is accessible without authentication via ADB or malicious apps. This could allow unintended access to application internals and may lead to de...

CVE-2025-50861

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...

PT-2025-37231

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s bridge networking functionality where a large multicast query interval value can lead to a time overflow within the br multicast send query function...

Network Isolation Bypass

github.com/moby/moby is vulnerable to network isolation bypass. The vulnerability is due to Docker failing to re-create iptables rules isolating bridge networks after firewalld reload, which allows an attacker to access all ports of containers across different bridge networks on the same host,...