912 matches found
pmd
PMD - source code analyzer PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex , but supports 16 other languages. It comes with 400...
AuroraStore
Aurora Store Aurora Store enables you to search and download apps from the official Google Play store. You can check app descriptions, screenshots, updates, reviews, and download the APK directly from Google Play to your device. To use Aurora Store, log in using Google Play account, when you firs...
billing-hack
Billing Hack For information about this code, go to http://sufficientlysecure.org/index.php/2013/10/29/google-play-billing-hacked/...
nextcloud_android
Nextcloud Android app Codacy Badge The Android client forNextcloud. Easily work with your data on your Nextcloud. How to contribute If you want to contribute to Nextcloud, you are very welcome: on our IRC channels and on freenode our forum at https://help.nextcloud.com for translations of the app...
Bad Diagnosis: Analyzing Consent and Data Collection Practices of Mobile Medical Apps
Mobile health mHealth apps collect personally-identifiable information while handling uniquely sensitive medical data, ranging from mental health records to real-time glucose or heart rate monitoring -- yet they remain poorly understood at scale. We present the first comprehensive analysis of...
chiasmodon
Chiasmodon Chiasmodon es una herramienta OSINT que permite a los usuarios recopilar información de diversas fuentes y realizar búsquedas dirigidas basadas en dominios, aplicaciones de Google Play, direcciones de correo electrónico, direcciones IP, organizaciones, URL y más. Proporciona capacidade...
CVE-2026-100620
Capgo CLI npm package @capgo/cli through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When onboarding via Google OAuth, the CLI invites the generated Google Play service account with the account-wide Play Console permission CANMANAGEDRAFTAPPSGLOBAL...
CVE-2026-100620 Capgo CLI through 7.98.2 Excessive Permissions via Overpermissioned Play Console Service Account
Capgo CLI npm package @capgo/cli through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When onboarding via Google OAuth, the CLI invites the generated Google Play service account with the account-wide Play Console permission CANMANAGEDRAFTAPPSGLOBAL...
CVE-2026-100620 Capgo CLI through 7.98.2 Excessive Permissions via Overpermissioned Play Console Service Account
Capgo CLI npm package @capgo/cli through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When onboarding via Google OAuth, the CLI invites the generated Google Play service account with the account-wide Play Console permission CANMANAGEDRAFTAPPSGLOBAL...
CVE-2026-100620 Capgo CLI through 7.98.2 Excessive Permissions via Overpermissioned Play Console Service Account
Capgo CLI npm package @capgo/cli through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When onboarding via Google OAuth, the CLI invites the generated Google Play service account with the account-wide Play Console permission CANMANAGEDRAFTAPPSGLOBAL...
CVE-2026-100620
Capgo CLI npm package @capgo/cli through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When onboarding via Google OAuth, the CLI invites the generated Google Play service account with the account-wide Play Console permission CANMANAGEDRAFTAPPSGLOBAL...
EUVD-2026-87715
Capgo CLI npm package @capgo/cli through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When onboarding via Google OAuth, the CLI invites the generated Google Play service account with the account-wide Play Console permission CANMANAGEDRAFTAPPSGLOBAL...
CVE-2026-100620
The Capgo CLI (npm package @capgo/cli ) through version 7.98.2 is affected by an over-permissioned service account during the Android onboarding flow. When users onboard via Google OAuth , the CLI incorrectly requests the account-wide CAN_MANAGE_DRAFT_APPS_GLOBAL permission via the Android Publis...
CVE-2026-100620: Improper Privilege Management
Capgo CLI npm package @capgo/cli through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When onboarding via Google OAuth, the CLI invites the generated Google Play service account with the account-wide Play Console permission CANMANAGEDRAFTAPPSGLOBAL...
PT-2026-99291
Name of the Vulnerable Software and Affected Versions Capgo CLI versions prior to 7.98.3 Description The Android onboarding flow contains an over-permissioned service account. During Google OAuth onboarding, the CLI assigns the CAN MANAGE DRAFT APPS GLOBAL permission passed via the...
Malicious code in google-play-card-balance482 (npm)
The package google-play-card-balance482 was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in google-play-card-balance162 (npm)
The package google-play-card-balance162 was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in google-play-card-balance432 (npm)
The package google-play-card-balance432 was found to contain malicious code. --- Credit: OpenSSF source...