MAL-2025-24980 Malicious code in lava-rainbow-ykg517-project (npm)

The package lava-rainbow-ykg517-project was found to contain malicious code...

MAL-2025-24977 Malicious code in lava-kite-ydp165-project (npm)

The package lava-kite-ydp165-project was found to contain malicious code...

MAL-2025-38565 Malicious code in volcano-lava-rjw951-project (npm)

The package volcano-lava-rjw951-project was found to contain malicious code...

MAL-2025-14794 Malicious code in arctic-lava-ezb031-project (npm)

The package arctic-lava-ezb031-project was found to contain malicious code...

MAL-2025-24975 Malicious code in lava-hill-ley368-project (npm)

The package lava-hill-ley368-project was found to contain malicious code...

MAL-2025-24976 Malicious code in lava-jade-qmd286-project (npm)

The package lava-jade-qmd286-project was found to contain malicious code...

MAL-2025-24983 Malicious code in lava-tide-dfd075-project (npm)

The package lava-tide-dfd075-project was found to contain malicious code...

MAL-2025-24974 Malicious code in lava-hammock-owx175-project (npm)

The package lava-hammock-owx175-project was found to contain malicious code...

Malicious code in myth-lava-flt044-project (npm)

The package myth-lava-flt044-project was found to contain malicious code...

MAL-2025-24984 Malicious code in lava-xenon-tls920-project (npm)

The package lava-xenon-tls920-project was found to contain malicious code...

MAL-2025-24981 Malicious code in lava-saturn-eir283-project (npm)

The package lava-saturn-eir283-project was found to contain malicious code...

MAL-2025-36923 Malicious code in tiger-lava-znd582-project (npm)

The package tiger-lava-znd582-project was found to contain malicious code...

MAL-2025-22546 Malicious code in honeycomb-lava-hxw725-project (npm)

The package honeycomb-lava-hxw725-project was found to contain malicious code...

MAL-2025-24979 Malicious code in lava-octopus-tna469-project (npm)

The package lava-octopus-tna469-project was found to contain malicious code...

CVE-2023-46081

Unauth. Stored Cross-Site Scripting XSS vulnerability in Lavacode Lava Directory Manager plugin = 1.1.34 versions...

CVE-2019-15339

The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.27 that allows any app co-located on the device to programmaticall...

CVE-2019-15374

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88lite/iris88lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

CVE-2019-15365

The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system property...

CVE-2019-15362

The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88go/iris88go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

CVE-2019-15335

The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.27 that allows any app co-located on the device to programmatically...