MAL-2025-190886 Malicious code in @posthog/nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79eae844852de94f0a7cd6826f344e60fe40945cdacfaa3d3d589c965ade4ad1 The package @posthog/nextjs was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190909 Malicious code in @postman/postman-mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c276129c0d99cb4f8aa63e9f3911b1f38145837396ac3b00ba48533a6050b8 The package @postman/postman-mcp-server was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190895 Malicious code in @posthog/twilio-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e9678d9d7f6fcdae98731e5fc3883af7f4150e22850c7eab87f992d00a4082 The package @posthog/twilio-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190876 Malicious code in @posthog/databricks-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e391efe36d6c40d46f8c9abbf9d68a3b7b73a56319db5a85a486fedfe90cb394 The package @posthog/databricks-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190925 Malicious code in posthog-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ec4a50c0b553e9abbcc25147ad50014cf1488415e1ec8e3234f3e9bb3cc24e The package posthog-node was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190924 Malicious code in posthog-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317ab9fe546aa6930bf7fb3ee7c35c737d56963b41a4f3d4363abdb0ebfbfa49 The package posthog-docusaurus was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190892 Malicious code in @posthog/sendgrid-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538f52ec82c02a69031b8b84a1e12b2d22ee68462c722f9dd4a8ea07d4e81d44 The package @posthog/sendgrid-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190917 Malicious code in @zapier/ai-actions-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0711da4a6c6d0dbc599d757b367430a63ae51f6f4fb48b6758fb21ba718b0778 The package @zapier/ai-actions-react was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190911 Malicious code in @postman/secret-scanner-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d1604689ef91985fbc1fe9f8958eb7a50835e71b7cfa4125de687ca37c2d19 The package @postman/secret-scanner-wasm was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190915 Malicious code in @seung-ju/react-native-action-sheet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a093775c06aa43c37f1449879903040ac8d4670967b0fc9931be9fc842d3c72 The package @seung-ju/react-native-action-sheet was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190896 Malicious code in @posthog/twitter-followers-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f5de01d0a45127f79e5f6db0ebea050e55f26d8ebbb38b72a4e422e6d3ecc6 The package @posthog/twitter-followers-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190918 Malicious code in @zapier/mcp-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b2f7745be8592869c863671add1d5a04c1d33f7a2c23a54fde611a5e021226 The package @zapier/mcp-integration was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190866 Malicious code in @ensdomains/buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae46f5c19a843ced3c421c4ef2bb7fc8c6dc112240fc84abafd26405d0a85bf The package @ensdomains/buffer was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198944

Malicious code in @posthog/gitub-star-sync-plugin npm...

Malicious code in @posthog/github-release-tracking-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb87af9bbf0349dfcf64e3a477f69780fd16d5d4d8e0269f263dc25214fd2f00 The package @posthog/github-release-tracking-plugin was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190881 Malicious code in @posthog/gitub-star-sync-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be422ec924addbeb23c34a8b3305835feb3d665ab57afdc1450734d0b10f5a4 The package @posthog/gitub-star-sync-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190894 Malicious code in @posthog/taxonomy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6160bb29593f706f1623c9cc373f06290747d183e2d495f4d0afc169252d3046 The package @posthog/taxonomy-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190888 Malicious code in @posthog/pagerduty-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f138dd2e1bf5607f92e6db9b88a64a178880202726e7dccf9d2970644cf007 The package @posthog/pagerduty-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190878 Malicious code in @posthog/first-time-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0fbb010dddd152c8b71f6919fd4d3e53999bd09a5354ce3411cb45caa8106a The package @posthog/first-time-event-tracker was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190905 Malicious code in @postman/pm-bin-macos-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af6b141ac3ae548c7fadfe1523b270a35c69e8f5c20035f682e9ee726f1bdec The package @postman/pm-bin-macos-x64 was found to contain malicious code. Source: google-open-source-security...