Malicious code in mushroom-bridge-v60l (npm)

The package mushroom-bridge-v60l was found to contain malicious code...

Malicious code in bridge-date-tc6d (npm)

The package bridge-date-tc6d was found to contain malicious code...

Malicious code in trezor-link-bridge (npm)

The package trezor-link-bridge was found to contain malicious code...

MAL-2025-37678 Malicious code in umbrella-bridge-ni8q (npm)

The package umbrella-bridge-ni8q was found to contain malicious code...

MAL-2025-16167 Malicious code in bridge-jalapeno-cws5 (npm)

The package bridge-jalapeno-cws5 was found to contain malicious code...

Malicious code in test-syncfusion-bridge (npm)

The package test-syncfusion-bridge was found to contain malicious code...

Malicious code in tools-bridge (npm)

The package tools-bridge was found to contain malicious code...

Malicious code in tangerine-bridge-t7tn (npm)

The package tangerine-bridge-t7tn was found to contain malicious code...

MAL-2025-16166 Malicious code in bridge-date-tc6d (npm)

The package bridge-date-tc6d was found to contain malicious code...

MAL-2025-26902 Malicious code in mushroom-bridge-v60l (npm)

The package mushroom-bridge-v60l was found to contain malicious code...

MAL-2025-38523 Malicious code in vk-teams-bridge (npm)

The package vk-teams-bridge was found to contain malicious code...

MAL-2025-16169 Malicious code in bridge-xigua-zzn5 (npm)

The package bridge-xigua-zzn5 was found to contain malicious code...

MAL-2025-16168 Malicious code in bridge-juniper-vy43 (npm)

The package bridge-juniper-vy43 was found to contain malicious code...

MAL-2025-9710 Malicious code in @yotpo-platform-packages/platform-bridge (npm)

The package @yotpo-platform-packages/platform-bridge was found to contain malicious code...

MAL-2025-21494 Malicious code in gitter-irc-bridge (npm)

The package gitter-irc-bridge was found to contain malicious code...

MAL-2025-14660 Malicious code in app-bridge-core (npm)

The package app-bridge-core was found to contain malicious code...

MAL-2025-37050 Malicious code in tools-bridge (npm)

The package tools-bridge was found to contain malicious code...

MAL-2025-17335 Malicious code in com.microsoft.mixedreality.toolkit.figmabridge (npm)

The package com.microsoft.mixedreality.toolkit.figmabridge was found to contain malicious code...

MAL-2025-26917 Malicious code in mutiapp-hybrid-bridge (npm)

The package mutiapp-hybrid-bridge was found to contain malicious code...

CVE-2025-50861

The CVE-2025-50861 entry affects the Lotus Cars Android App (com.lotus.carsdomestic.intl) version 1.2.8, where the exported component PushDeepLinkActivity is accessible without authentication via ADB or malicious apps. This could allow unintended access to application internals and may lead to de...