MAL-2025-28761 Malicious code in papa-watermelon-giml (npm)

The package papa-watermelon-giml was found to contain malicious code...

MAL-2025-38887 Malicious code in watermelon-zenith-3fd5 (npm)

The package watermelon-zenith-3fd5 was found to contain malicious code...

MAL-2025-38840 Malicious code in watermelon-0q8-project (npm)

The package watermelon-0q8-project was found to contain malicious code...

MAL-2025-29876 Malicious code in project-5vs2l-watermelon (npm)

The package project-5vs2l-watermelon was found to contain malicious code...

MAL-2025-38855 Malicious code in watermelon-eo9-project (npm)

The package watermelon-eo9-project was found to contain malicious code...

MAL-2025-30649 Malicious code in project-xrn0v-watermelon (npm)

The package project-xrn0v-watermelon was found to contain malicious code...

MAL-2025-30636 Malicious code in project-x6zki-watermelon (npm)

The package project-x6zki-watermelon was found to contain malicious code...

MAL-2025-38848 Malicious code in watermelon-apple-fubm (npm)

The package watermelon-apple-fubm was found to contain malicious code...

CVE-2020-4035: Improper Neutralization of Special Elements used in an SQL Command

In WatermelonDB NPM package "@nozbe/watermelondb" before versions 0.15.1 and 0.16.2, a maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete all or selected records from the database, generally causing the app to become...

‘LuminosityLink RAT’ Author Pleads Guilty

A 21-year-old Kentucky man has pleaded guilty to authoring and distributing a popular hacking tool called "LuminosityLink," a malware strain that security experts say was used by thousands of customers to gain unauthorized access to tens of thousands of computers across 78 countries worldwide. Th...