npm

medusa-plugin-momo@0.0.68

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 5:45 PM UTC

Malicious

OSV ID

MAL-2025-190850

Ecosystem

npm

Summary

The package medusa-plugin-momo was found to contain malicious code.

Source: amazon-inspector (4670d82d1db3b1865426e69d47798cb98aaed8be48cec99e86be3741872aa936)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.