@posthog/nextjs (>=0.0.1 <=0.0.2), @posthog/nextjs-config (>=1.0.0 <=1.3.3) +2 more potentially affected by unknown CVE via @posthog/cli (>=0.3.7 <=0.5.12)

@posthog/cli NPM version =0.3.7, =0.0.1, =1.0.0, =0.0.9, =0.69.0, =0.91.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-190671...

EUVD-2025-198703

Malicious code in @posthog/cli npm...

Malicious code in @posthog/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57662af8290901771cf534d8b1ca05ca88dfd84054580144d934f730549a4653 The package @posthog/cli was found to contain malicious code. Source: ghsa-malware e663c40b9060088ff86ea24eec083b9b5bf8afdec2e1963895e47e5177a673d1 A...

MAL-2025-190671 Malicious code in @posthog/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57662af8290901771cf534d8b1ca05ca88dfd84054580144d934f730549a4653 The package @posthog/cli was found to contain malicious code. Source: ghsa-malware e663c40b9060088ff86ea24eec083b9b5bf8afdec2e1963895e47e5177a673d1 A...