277 matches found
MAL-2025-191456 Malicious code in @medusajs/analytics-posthog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bcda5a08e7631f3c8bdbfd1c6a827a23b4a2cadf1ca3ca3a1ae32674df5172 The package @medusajs/analytics-posthog was found to contain malicious code. Source: ghsa-malware...
Malicious code in @posthog/rrweb-replay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084c272e547764a91347a8436855b707a75409f57fde2692078e9edf5d9b703b The package @posthog/rrweb-replay was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191299 Malicious code in @posthog/rrweb-replay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084c272e547764a91347a8436855b707a75409f57fde2692078e9edf5d9b703b The package @posthog/rrweb-replay was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199299
Malicious code in @posthog/rrweb-replay npm...
EUVD-2025-199096
Malicious code in @posthog/plugin-server npm...
Malicious code in @posthog/plugin-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbacde545c940abfe63a0667580ea37cfc021d6b3e25094b71e23273cd899e1b The package @posthog/plugin-server was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190947 Malicious code in @posthog/plugin-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbacde545c940abfe63a0667580ea37cfc021d6b3e25094b71e23273cd899e1b The package @posthog/plugin-server was found to contain malicious code. Source: ghsa-malware...
Malicious code in @posthog/drop-events-on-property-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1dee879dbf8f8819008c31e641e4fec6584690087c6929cba530e9171464cb4 The package @posthog/drop-events-on-property-plugin was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199097
Malicious code in @posthog/drop-events-on-property-plugin npm...
EUVD-2025-199098
Malicious code in @posthog/clickhouse npm...
Malicious code in @posthog/clickhouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67710c7cf24d338618be2ab087d4c3b27117879492e29334b31cd0328e171a The package @posthog/clickhouse was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190945 Malicious code in @posthog/clickhouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67710c7cf24d338618be2ab087d4c3b27117879492e29334b31cd0328e171a The package @posthog/clickhouse was found to contain malicious code. Source: ghsa-malware...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in posthog-react-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc429049d0797390f57bc821cabd2d46fad88c5363136fc96bab4b5497000fe The package posthog-react-native was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-198925
Malicious code in @posthog/wizard npm...
EUVD-2025-198952
Malicious code in @posthog/automatic-cohorts-plugin npm...
EUVD-2025-198940
Malicious code in @posthog/maxmind-plugin npm...
EUVD-2025-198901
Malicious code in posthog-react-native npm...
Malicious code in @posthog/snowflake-export-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64fb205150fc65f2334ab9ca1530bec4ef2d4dfea99ca328bfda4c70063ed793 The package @posthog/snowflake-export-plugin was found to contain malicious code. Source: google-open-source-security...