MAL-2025-45229 Malicious code in mofashi-xuetude-banlvshu-xia (npm)

The package mofashi-xuetude-banlvshu-xia was found to contain malicious code...

MAL-2025-42544 Malicious code in @hishpr/inventore-necessitatibus-dolorum-nihil (npm)

The package @hishpr/inventore-necessitatibus-dolorum-nihil was found to contain malicious code...

MAL-2025-46827 Malicious code in yinpan-fashu-qimen-mianshouban-jiaocai (npm)

The package yinpan-fashu-qimen-mianshouban-jiaocai was found to contain malicious code...

MAL-2025-46274 Malicious code in test-mlw1-sored-novel-afear-neves (npm)

The package test-mlw1-sored-novel-afear-neves was found to contain malicious code...

MAL-2025-42716 Malicious code in @taktikorg/occaecati-praesentium-quibusdam (npm)

The package @taktikorg/occaecati-praesentium-quibusdam was found to contain malicious code...

MAL-2025-42563 Malicious code in @hishpr/quaerat-exercitationem-possimus (npm)

The package @hishpr/quaerat-exercitationem-possimus was found to contain malicious code...

MAL-2025-46698 Malicious code in xianhua-yingyu-erlingyisiyiling-erlingyisiyier (npm)

The package xianhua-yingyu-erlingyisiyiling-erlingyisiyier was found to contain malicious code...

MAL-2025-42981 Malicious code in @zalastax/nolb-_cloudm (npm)

The package @zalastax/nolb-cloudm was found to contain malicious code...

MAL-2025-43054 Malicious code in @zalastax/nolb-_pin (npm)

The package @zalastax/nolb-pin was found to contain malicious code...

MAL-2025-46084 Malicious code in siska-tapai1-breki (npm)

The package siska-tapai1-breki was found to contain malicious code...

MAL-2025-42530 Malicious code in @hishpr/dolorum-illum-incidunt-beatae (npm)

The package @hishpr/dolorum-illum-incidunt-beatae was found to contain malicious code...

MAL-2025-42207 Malicious code in @crabas0npm/alias-mollitia-quia (npm)

The package @crabas0npm/alias-mollitia-quia was found to contain malicious code...

CVE-2025-48534

In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48531

In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48531

In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48534

In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48534

CVE-2025-48534 affects Android’s CellBroadcast handling code. In getDefaultCBRPackageName of CellBroadcastHandler.java, a logic error may allow privilege escalation, yielding local denial of service with System execution privileges and no user interaction required. Current connected sources confi...

CVE-2025-48531

In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Malicious code in monolith-twirp-merge-queue-go-mergequeueservice (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3e907c6e8d9b369e32e165c27d2a66931e8ecbb4b256a932542731234e6cf8da The OpenSSF Package Analysis project identified 'monolith-twirp-merge-queue-go-mergequeueservice' @ 1.0.2 rubygems as malicious. It is considere...

MAL-2025-42129 Malicious code in pp-react-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71193da54e6cdc258489d02db5987830a3bc147cbf9b43236f5757cab04f9c73 The OpenSSF Package Analysis project identified 'pp-react-grid' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...