Malicious code in lotus-p7q1d-c29z2-iceberg-project (npm)

The package lotus-p7q1d-c29z2-iceberg-project was found to contain malicious code...

MAL-2025-23760 Malicious code in jewel-fqn5p-ojmgf-lotus-project (npm)

The package jewel-fqn5p-ojmgf-lotus-project was found to contain malicious code...

MAL-2025-25606 Malicious code in lotus-689e5-hsbn3-utopia-project (npm)

The package lotus-689e5-hsbn3-utopia-project was found to contain malicious code...

MAL-2025-25609 Malicious code in lotus-krwlr-qvulp-kismet-project (npm)

The package lotus-krwlr-qvulp-kismet-project was found to contain malicious code...

Malicious code in lotus-6c7bt-96orv-mirage-project (npm)

The package lotus-6c7bt-96orv-mirage-project was found to contain malicious code...

Malicious code in kale-xhxlp-pmkjh-lotus-project (npm)

The package kale-xhxlp-pmkjh-lotus-project was found to contain malicious code...

Malicious code in lotus-689e5-hsbn3-utopia-project (npm)

The package lotus-689e5-hsbn3-utopia-project was found to contain malicious code...

Malicious code in lotus-5sbc5-tvb8k-obsidian-project (npm)

The package lotus-5sbc5-tvb8k-obsidian-project was found to contain malicious code...

MAL-2025-37846 Malicious code in unity-ywvl3-quymi-lotus-project (npm)

The package unity-ywvl3-quymi-lotus-project was found to contain malicious code...

MAL-2025-25608 Malicious code in lotus-8fjua-8by7e-celestial-project (npm)

The package lotus-8fjua-8by7e-celestial-project was found to contain malicious code...

MAL-2025-33383 Malicious code in sky-es669-2medd-lotus-project (npm)

The package sky-es669-2medd-lotus-project was found to contain malicious code...

MAL-2025-24180 Malicious code in kale-xhxlp-pmkjh-lotus-project (npm)

The package kale-xhxlp-pmkjh-lotus-project was found to contain malicious code...

Malicious code in jewel-fqn5p-ojmgf-lotus-project (npm)

The package jewel-fqn5p-ojmgf-lotus-project was found to contain malicious code...

Malicious code in sky-es669-2medd-lotus-project (npm)

The package sky-es669-2medd-lotus-project was found to contain malicious code...

Malicious code in lotus-8fjua-8by7e-celestial-project (npm)

The package lotus-8fjua-8by7e-celestial-project was found to contain malicious code...

MAL-2025-25605 Malicious code in lotus-5sbc5-tvb8k-obsidian-project (npm)

The package lotus-5sbc5-tvb8k-obsidian-project was found to contain malicious code...

MAL-2025-25607 Malicious code in lotus-6c7bt-96orv-mirage-project (npm)

The package lotus-6c7bt-96orv-mirage-project was found to contain malicious code...

MAL-2025-25610 Malicious code in lotus-p7q1d-c29z2-iceberg-project (npm)

The package lotus-p7q1d-c29z2-iceberg-project was found to contain malicious code...

CVE-2025-50861

The CVE-2025-50861 entry affects the Lotus Cars Android App (com.lotus.carsdomestic.intl) version 1.2.8, where the exported component PushDeepLinkActivity is accessible without authentication via ADB or malicious apps. This could allow unintended access to application internals and may lead to de...

CVE-2025-50862

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...