MAL-2025-14950 Malicious code in asteroid-andromeda-superagent-terser (npm)

The package asteroid-andromeda-superagent-terser was found to contain malicious code...

MAL-2025-26189 Malicious code in mensa-event-local-superagent (npm)

The package mensa-event-local-superagent was found to contain malicious code...

MAL-2025-15213 Malicious code in await-lynx-scripts-superagent (npm)

The package await-lynx-scripts-superagent was found to contain malicious code...

MAL-2025-30822 Malicious code in publish-superagent-websockets-gulp (npm)

The package publish-superagent-websockets-gulp was found to contain malicious code...

MAL-2025-34333 Malicious code in sync-superagent-forever-singularitarianism (npm)

The package sync-superagent-forever-singularitarianism was found to contain malicious code...

MAL-2025-34198 Malicious code in superagent-miranda-selenium-dynamo (npm)

The package superagent-miranda-selenium-dynamo was found to contain malicious code...

MAL-2025-23872 Malicious code in joviology-fomalhaut-superagent-fetch (npm)

The package joviology-fomalhaut-superagent-fetch was found to contain malicious code...

Malicious code in jwt-on-superagent-ora (npm)

The package jwt-on-superagent-ora was found to contain malicious code...

MAL-2025-15721 Malicious code in biotechnology-superagent-primatology-juno (npm)

The package biotechnology-superagent-primatology-juno was found to contain malicious code...

MAL-2025-34199 Malicious code in superagent-process-hermes-antares (npm)

The package superagent-process-hermes-antares was found to contain malicious code...

MAL-2025-27076 Malicious code in nanotechnology-mini-css-extract-plugin-sociobiology-superagent (npm)

The package nanotechnology-mini-css-extract-plugin-sociobiology-superagent was found to contain malicious code...

MAL-2024-9432 Malicious code in atg-superagent-retry-delay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75f0747e74a5e0a7d519918b8aceef9e8f4f9eaa0ad1854c1954276bb1c5166c The OpenSSF Package Analysis project identified 'atg-superagent-retry-delay' @ 100.100.100 npm as malicious. It is considered malicious because:...

MAL-2023-820 Malicious code in superagtn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 132a64e6c2edba465a5821d7d226132e07c8aabde16024ade137e99116495bdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information Leakage

superagent is vulnerable to information leakage. During a redirect to different hosts, it does not delete authorization header, thereby performing unauthorised delivery of the contents of the header to third parties...

GHSA-8225-6CVR-8PQP superagent vulnerable to zip bomb attacks

Affected versions of superagent do not check the post-decompression size of ZIP compressed HTTP responses prior to decompressing. This results in the package being vulnerable to a ZIP bomb attack, where an extremely small ZIP file becomes many orders of magnitude larger when decompressed. This ma...

superagent vulnerable to zip bomb attacks

Affected versions of superagent do not check the post-decompression size of ZIP compressed HTTP responses prior to decompressing. This results in the package being vulnerable to a ZIP bomb attack, where an extremely small ZIP file becomes many orders of magnitude larger when decompressed. This ma...

192.168.0.172 (=4.6.1), 2ch (>=0.1.0 <=0.1.3) +6492 more potentially affected by CVE-2017-16129 via superagent (>=0.10.0 <=3.6.3)

superagent NPM version =0.10.0, =0.1.0, =0.13.0, =0.0.2, =0.0.1, =1.3.1, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =0.1.0, =0.1.6 and more Source cves: CVE-2017-16129 Source advisory: OSV:GHSA-8225-6CVR-8PQP...

superagent denial of service vulnerability

superagent is a small progressive HTTP client request library. A security vulnerability exists in superagent. An attacker could exploit this vulnerability to cause a denial of service large CPU or memory consumption...

CVE-2017-16129

The HTTP client module superagent is vulnerable to ZIP bomb attacks. In a ZIP bomb attack, the HTTP server replies with a compressed response that becomes several magnitudes larger once uncompressed. If a client does not take special care when processing such responses, it may result in excessive...

CVE-2017-16129

The HTTP client module superagent is vulnerable to ZIP bomb attacks. In a ZIP bomb attack, the HTTP server replies with a compressed response that becomes several magnitudes larger once uncompressed. If a client does not take special care when processing such responses, it may result in excessive...