Malicious code in lava-xenon-tls920-project (npm)

The package lava-xenon-tls920-project was found to contain malicious code...

Malicious code in volcano-lava-rjw951-project (npm)

The package volcano-lava-rjw951-project was found to contain malicious code...

MAL-2025-36923 Malicious code in tiger-lava-znd582-project (npm)

The package tiger-lava-znd582-project was found to contain malicious code...

MAL-2025-24986 Malicious code in lava-yacht-hfy974-project (npm)

The package lava-yacht-hfy974-project was found to contain malicious code...

MAL-2025-24557 Malicious code in kite-lava-dst303-project (npm)

The package kite-lava-dst303-project was found to contain malicious code...

Malicious code in lava-aroma-gtg518-project (npm)

The package lava-aroma-gtg518-project was found to contain malicious code...

MAL-2025-24984 Malicious code in lava-xenon-tls920-project (npm)

The package lava-xenon-tls920-project was found to contain malicious code...

MAL-2025-24978 Malicious code in lava-labyrinth-gwx069-project (npm)

The package lava-labyrinth-gwx069-project was found to contain malicious code...

MAL-2025-22546 Malicious code in honeycomb-lava-hxw725-project (npm)

The package honeycomb-lava-hxw725-project was found to contain malicious code...

Malicious code in lava-yacht-hfy974-project (npm)

The package lava-yacht-hfy974-project was found to contain malicious code...

Malicious code in lava-saturn-eir283-project (npm)

The package lava-saturn-eir283-project was found to contain malicious code...

MAL-2025-24981 Malicious code in lava-saturn-eir283-project (npm)

The package lava-saturn-eir283-project was found to contain malicious code...

MAL-2025-37936 Malicious code in uranium-lava-yqw291-project (npm)

The package uranium-lava-yqw291-project was found to contain malicious code...

MAL-2025-24971 Malicious code in lava-aroma-gtg518-project (npm)

The package lava-aroma-gtg518-project was found to contain malicious code...

CVE-2023-46081

Unauth. Stored Cross-Site Scripting XSS vulnerability in Lavacode Lava Directory Manager plugin = 1.1.34 versions...

CVE-2019-15339

The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.27 that allows any app co-located on the device to programmaticall...

CVE-2019-15374

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88lite/iris88lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

CVE-2019-15365

The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system property...

CVE-2019-15362

The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88go/iris88go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

CVE-2019-15335

The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.27 that allows any app co-located on the device to programmatically...