MAL-2025-44536 Malicious code in hand-earn-nation (npm)

The package hand-earn-nation was found to contain malicious code...

Malicious code in iota-sync-json-andromeda (npm)

The package iota-sync-json-andromeda was found to contain malicious code...

MAL-2025-43892 Malicious code in copilotstudio-console (npm)

The package copilotstudio-console was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in react-milton (npm)

The package react-milton was found to contain malicious code...

MAL-2025-43775 Malicious code in checking-ip (npm)

The package checking-ip was found to contain malicious code...

MAL-2025-46639 Malicious code in winston-datalog (npm)

The package winston-datalog was found to contain malicious code...

VulRTex: a Reasoning-Guided Approach to Identify Vulnerabilities from Rich-Text Issue Report

Software vulnerabilities exist in open-source software OSS, and the developers who discover these vulnerabilities may submit issue reports IRs to describe their details. Security practitioners need to spend a lot of time manually identifying vulnerability-related IRs from the community, and the...

ASB-A-384514657

Bulletin has no description...

ASB-A-419014146

Bulletin has no description...

ASB-A-381419370

In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...

ASB-A-328182084

Bulletin has no description...

ASB-A-353680402

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. Us...

Malicious code in d360-web (npm)

The package d360-web was found to contain malicious code...

MAL-2025-42050 Malicious code in oclif-typescript (npm)

The package oclif-typescript was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 588168406ce54991496f37d72c618c066f9326ccd7d9cf0a774edaf7bc4b4d4f This package installs a dependency hosted on a custom domain that runs a...

Malicious code in morgan-logger (npm)

The package morgan-logger was found to contain malicious code...

MAL-2025-41994 Malicious code in ganachhe (npm)

The package ganachhe was found to contain malicious code...

Malicious code in sqrt_module (npm)

The package sqrtmodule was found to contain malicious code...

Malicious code in ganachhe (npm)

The package ganachhe was found to contain malicious code...

Malicious code in eslint-plugin-dummy (npm)

The package eslint-plugin-dummy was found to contain malicious code...

Malicious code in ganacche (npm)

The package ganacche was found to contain malicious code...