The complete source code for the Android remote access Trojan (RAT) called Dendroid has been leaked online, which researchers have found contains several vulnerabilities.