MAL-2025-15721 Malicious code in biotechnology-superagent-primatology-juno (npm)

The package biotechnology-superagent-primatology-juno was found to contain malicious code...

Malicious code in asteroid-andromeda-superagent-terser (npm)

The package asteroid-andromeda-superagent-terser was found to contain malicious code...

MAL-2025-17003 Malicious code in chromedriver-websockets-altair-superagent (npm)

The package chromedriver-websockets-altair-superagent was found to contain malicious code...

Malicious code in superagent-miranda-selenium-dynamo (npm)

The package superagent-miranda-selenium-dynamo was found to contain malicious code...

Malicious code in cross-env-superagent-umbriel-mongodb (npm)

The package cross-env-superagent-umbriel-mongodb was found to contain malicious code...

Malicious code in sync-superagent-forever-singularitarianism (npm)

The package sync-superagent-forever-singularitarianism was found to contain malicious code...

MAL-2025-34333 Malicious code in sync-superagent-forever-singularitarianism (npm)

The package sync-superagent-forever-singularitarianism was found to contain malicious code...

MAL-2025-38689 Malicious code in vuetify-superagent-eslint-config-spawn (npm)

The package vuetify-superagent-eslint-config-spawn was found to contain malicious code...

MAL-2025-34198 Malicious code in superagent-miranda-selenium-dynamo (npm)

The package superagent-miranda-selenium-dynamo was found to contain malicious code...

MAL-2025-34199 Malicious code in superagent-process-hermes-antares (npm)

The package superagent-process-hermes-antares was found to contain malicious code...

MAL-2025-24136 Malicious code in jwt-on-superagent-ora (npm)

The package jwt-on-superagent-ora was found to contain malicious code...

MAL-2024-9432 Malicious code in atg-superagent-retry-delay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75f0747e74a5e0a7d519918b8aceef9e8f4f9eaa0ad1854c1954276bb1c5166c The OpenSSF Package Analysis project identified 'atg-superagent-retry-delay' @ 100.100.100 npm as malicious. It is considered malicious because:...

MAL-2023-820 Malicious code in superagtn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 132a64e6c2edba465a5821d7d226132e07c8aabde16024ade137e99116495bdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information Leakage

superagent is vulnerable to information leakage. During a redirect to different hosts, it does not delete authorization header, thereby performing unauthorised delivery of the contents of the header to third parties...

superagent vulnerable to zip bomb attacks

Affected versions of superagent do not check the post-decompression size of ZIP compressed HTTP responses prior to decompressing. This results in the package being vulnerable to a ZIP bomb attack, where an extremely small ZIP file becomes many orders of magnitude larger when decompressed. This ma...

6aika-paatos-client (>=0.0.1, <=0.0.2), @agilegravity/ai-client (1.0.0) +515 more potentially affected by CVE-2017-16129 via superagent (>=3.0.0, <=3.6.3)

superagent NPM version =3.0.0, =0.0.1, =1.0.0-beta.11, =2.0.0-beta.1, =0.1.4, =1.0.1, =0.2.0, =12.0.0-rc.1, =14.6.0 and more Source cves: CVE-2017-16129 Source advisory: OSV:GHSA-8225-6CVR-8PQP...

GHSA-8225-6CVR-8PQP superagent vulnerable to zip bomb attacks

Affected versions of superagent do not check the post-decompression size of ZIP compressed HTTP responses prior to decompressing. This results in the package being vulnerable to a ZIP bomb attack, where an extremely small ZIP file becomes many orders of magnitude larger when decompressed. This ma...

superagent denial of service vulnerability

superagent is a small progressive HTTP client request library. A security vulnerability exists in superagent. An attacker could exploit this vulnerability to cause a denial of service large CPU or memory consumption...

DEBIAN-CVE-2017-16129

The HTTP client module superagent is vulnerable to ZIP bomb attacks. In a ZIP bomb attack, the HTTP server replies with a compressed response that becomes several magnitudes larger once uncompressed. If a client does not take special care when processing such responses, it may result in excessive...

CVE-2017-16129

The HTTP client module superagent is vulnerable to ZIP bomb attacks. In a ZIP bomb attack, the HTTP server replies with a compressed response that becomes several magnitudes larger once uncompressed. If a client does not take special care when processing such responses, it may result in excessive...