Malicious code in iota-terser-webpack-plugin-hermes-postcss (npm)

The package iota-terser-webpack-plugin-hermes-postcss was found to contain malicious code...

MAL-2025-45185 Malicious code in mighty-sum-river (npm)

The package mighty-sum-river was found to contain malicious code...

MAL-2025-43597 Malicious code in bee-easier-term (npm)

The package bee-easier-term was found to contain malicious code...

MAL-2025-46255 Malicious code in terser-webpack-plugin-polaris-grus-gravity (npm)

The package terser-webpack-plugin-polaris-grus-gravity was found to contain malicious code...

MAL-2025-45125 Malicious code in map-frequently-forward (npm)

The package map-frequently-forward was found to contain malicious code...

MAL-2025-44922 Malicious code in kssd-vol9-virus (npm)

The package kssd-vol9-virus was found to contain malicious code...

MAL-2025-46478 Malicious code in ursa-nestjs-less-loader-sails (npm)

The package ursa-nestjs-less-loader-sails was found to contain malicious code...

MAL-2025-43342 Malicious code in @zalastax/nolb-liv (npm)

The package @zalastax/nolb-liv was found to contain malicious code...

MAL-2025-42508 Malicious code in @erboladaiteas/unde-eum (npm)

The package @erboladaiteas/unde-eum was found to contain malicious code...

MAL-2025-45256 Malicious code in nadia-gembus37-breki (npm)

The package nadia-gembus37-breki was found to contain malicious code...

MAL-2025-46018 Malicious code in shenmixue-tianqi (npm)

The package shenmixue-tianqi was found to contain malicious code...

MAL-2025-43892 Malicious code in copilotstudio-console (npm)

The package copilotstudio-console was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in react-milton (npm)

The package react-milton was found to contain malicious code...

MAL-2025-43775 Malicious code in checking-ip (npm)

The package checking-ip was found to contain malicious code...

MAL-2025-46639 Malicious code in winston-datalog (npm)

The package winston-datalog was found to contain malicious code...

VulRTex: a Reasoning-Guided Approach to Identify Vulnerabilities from Rich-Text Issue Report

Software vulnerabilities exist in open-source software OSS, and the developers who discover these vulnerabilities may submit issue reports IRs to describe their details. Security practitioners need to spend a lot of time manually identifying vulnerability-related IRs from the community, and the...

ASB-A-384514657

Bulletin has no description...

ASB-A-419014146

Bulletin has no description...

ASB-A-381419370

In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...

ASB-A-353680402

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. Us...