GHSA-W6H2-FR4Q-XVXV PraisonAI: Compute-bridged file tools allow shell command injection

Compute-bridged file tools allow shell command injection Summary LocalManagedAgent / SandboxedAgent compute bridging wraps readfile, listfiles, and writefile when a compute provider is attached. The bridge converts those file operations into shell command strings using raw path arguments, then...

Malicious code in tools-bridge (npm)

The package tools-bridge was found to contain malicious code...

MAL-2025-37050 Malicious code in tools-bridge (npm)

The package tools-bridge was found to contain malicious code...