npm

invo @0.2.2

Vulnerability report · Last retrieved from osv.dev August 15, 2026 at 2:36 PM UTC

Malicious

OSV ID

MAL-2025-190969

Ecosystem

npm

Summary

The package invo was found to contain malicious code.

Source: amazon-inspector (b9e4a40c8b32a7c38f435045392647f8c5024b472cd396c5d370f6f90eb37848)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.