MAL-2025-24975 Malicious code in lava-hill-ley368-project (npm)

The package lava-hill-ley368-project was found to contain malicious code...

MAL-2025-24973 Malicious code in lava-fjord-bvg897-project (npm)

The package lava-fjord-bvg897-project was found to contain malicious code...

MAL-2025-24971 Malicious code in lava-aroma-gtg518-project (npm)

The package lava-aroma-gtg518-project was found to contain malicious code...

MAL-2025-28298 Malicious code in opaline-lava-kwk805-project (npm)

The package opaline-lava-kwk805-project was found to contain malicious code...

MAL-2025-24979 Malicious code in lava-octopus-tna469-project (npm)

The package lava-octopus-tna469-project was found to contain malicious code...

MAL-2025-24977 Malicious code in lava-kite-ydp165-project (npm)

The package lava-kite-ydp165-project was found to contain malicious code...

MAL-2025-15861 Malicious code in blossom-lava-nyf843-project (npm)

The package blossom-lava-nyf843-project was found to contain malicious code...

MAL-2025-38565 Malicious code in volcano-lava-rjw951-project (npm)

The package volcano-lava-rjw951-project was found to contain malicious code...

MAL-2025-22546 Malicious code in honeycomb-lava-hxw725-project (npm)

The package honeycomb-lava-hxw725-project was found to contain malicious code...

MAL-2025-24978 Malicious code in lava-labyrinth-gwx069-project (npm)

The package lava-labyrinth-gwx069-project was found to contain malicious code...

MAL-2025-38599 Malicious code in vortex-lava-eox877-project (npm)

The package vortex-lava-eox877-project was found to contain malicious code...

MAL-2025-24983 Malicious code in lava-tide-dfd075-project (npm)

The package lava-tide-dfd075-project was found to contain malicious code...

MAL-2025-24974 Malicious code in lava-hammock-owx175-project (npm)

The package lava-hammock-owx175-project was found to contain malicious code...

MAL-2025-24972 Malicious code in lava-fern-ulm049-project (npm)

The package lava-fern-ulm049-project was found to contain malicious code...

CVE-2023-46081

Unauth. Stored Cross-Site Scripting XSS vulnerability in Lavacode Lava Directory Manager plugin = 1.1.34 versions...

CVE-2019-15339

The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.27 that allows any app co-located on the device to programmaticall...

CVE-2019-15374

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88lite/iris88lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

CVE-2019-15365

The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system property...

CVE-2019-15362

The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88go/iris88go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

CVE-2019-15335

The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.27 that allows any app co-located on the device to programmatically...