401 matches found
MAL-2025-45501 Malicious code in paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa (npm)
The package paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa was found to contain malicious code...
MAL-2025-43431 Malicious code in algol-koa-xenos-redis (npm)
The package algol-koa-xenos-redis was found to contain malicious code...
MAL-2025-45560 Malicious code in pino-pretty-antares-koa-carpo (npm)
The package pino-pretty-antares-koa-carpo was found to contain malicious code...
MAL-2025-45368 Malicious code in nucleosynthesis-lithosphere-koa-lacerta (npm)
The package nucleosynthesis-lithosphere-koa-lacerta was found to contain malicious code...
Access Control Bypass
Overview @koa/router is a Affected versions of this package are vulnerable to Access Control Bypass. due to the middleware being silently dropped from the execution chain when the router prefix contains path parameters. Depending on what the skipped middleware was supposed to protect, an attacker...
Open Redirect
Amendment This was deemed not a vulnerability. Overview org.webjars.npm:koa is a Koa web app framework Affected versions of this package are vulnerable to Open Redirect via the redirect function in lib/response.js due to improper input sanitization. An attacker can redirect users to arbitrary...
Open Redirect
Overview koa is a Koa web app framework Affected versions of this package are vulnerable to Open Redirect via the redirect function in lib/response.js due to improper input sanitization. An attacker can redirect users to arbitrary external sites by exploiting this vulnerability. Remediation A fix...
02.koa-demo (=1.0.0), 0510test (=1.0.0) +13140 more potentially affected by unknown CVE via koa (>=0.0.1 <=3.2.1)
koa NPM version =0.0.1, =1.3.7, =1.0.0, =0.0.1, =1.0.0, =1.0.1 - 2-26 =1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-KOA-12143256...
Malicious code in koa-mq (npm)
The package koa-mq was found to contain malicious code...
Malicious code in tool-koa-technocracy-ariel (npm)
The package tool-koa-technocracy-ariel was found to contain malicious code...
Malicious code in koa-vulcan-auth-quasarjet (npm)
The package koa-vulcan-auth-quasarjet was found to contain malicious code...
Malicious code in palynology-acamar-remark-koa (npm)
The package palynology-acamar-remark-koa was found to contain malicious code...
Malicious code in koa-radioastronomy-cosmogenic-mongoose (npm)
The package koa-radioastronomy-cosmogenic-mongoose was found to contain malicious code...
Malicious code in zenobia-panspermia-koa-standard (npm)
The package zenobia-panspermia-koa-standard was found to contain malicious code...
Malicious code in hyperion-koa-vuepress-zenith (npm)
The package hyperion-koa-vuepress-zenith was found to contain malicious code...
Malicious code in koa-highway (npm)
The package koa-highway was found to contain malicious code...
MAL-2025-24720 Malicious code in koa-speleology-greatfilter-gravitationalwave (npm)
The package koa-speleology-greatfilter-gravitationalwave was found to contain malicious code...
MAL-2025-22857 Malicious code in hyperion-koa-vuepress-zenith (npm)
The package hyperion-koa-vuepress-zenith was found to contain malicious code...