MAL-2025-190908 Malicious code in @postman/postman-mcp-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b1da432f0b6ecaccc97520bb9697e6dbf44b04415bd15e6ac9864c86f3b37e The package @postman/postman-mcp-cli was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/github-release-tracking-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb87af9bbf0349dfcf64e3a477f69780fd16d5d4d8e0269f263dc25214fd2f00 The package @posthog/github-release-tracking-plugin was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190928 Malicious code in zapier-platform-legacy-scripting-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90298308f4d64cfb41746e3f65bcdbae9f4d790f7db3034608ea5d520aa73cc The package zapier-platform-legacy-scripting-runner was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190913 Malicious code in @postman/wdio-junit-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac6f5998a89d257823fdf6368153d30126e695eb96b8ba6a5cd500fe661b8f8 The package @postman/wdio-junit-reporter was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190899 Malicious code in @posthog/web-dev-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8d0531931bec7f4add3b4f255b7f6572d28ff3edf2774f7d076fde394eb405 The package @posthog/web-dev-server was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190881 Malicious code in @posthog/gitub-star-sync-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be422ec924addbeb23c34a8b3305835feb3d665ab57afdc1450734d0b10f5a4 The package @posthog/gitub-star-sync-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190885 Malicious code in @posthog/maxmind-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72a0e57ac542882acdc23de098c76f6992f6bdb14db9daac4a943c0ba262bd4 The package @posthog/maxmind-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190903 Malicious code in @postman/pm-bin-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94045a09bfa0905195be4f028d9e42bcf608154a645b14b2028754dc6e787b80 The package @postman/pm-bin-linux-x64 was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190920 Malicious code in @zapier/stubtree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dfbd67e2e2058bdfb35bcccc34ffd8ed380f6f22fc196d18803fbca6725a04 The package @zapier/stubtree was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190894 Malicious code in @posthog/taxonomy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6160bb29593f706f1623c9cc373f06290747d183e2d495f4d0afc169252d3046 The package @posthog/taxonomy-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190905 Malicious code in @postman/pm-bin-macos-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af6b141ac3ae548c7fadfe1523b270a35c69e8f5c20035f682e9ee726f1bdec The package @postman/pm-bin-macos-x64 was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190888 Malicious code in @posthog/pagerduty-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f138dd2e1bf5607f92e6db9b88a64a178880202726e7dccf9d2970644cf007 The package @posthog/pagerduty-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190878 Malicious code in @posthog/first-time-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0fbb010dddd152c8b71f6919fd4d3e53999bd09a5354ce3411cb45caa8106a The package @posthog/first-time-event-tracker was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190882 Malicious code in @posthog/hedgehog-mode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b044ae176df3e6019c54c314bdf3ec17c98741510cf5c024f85a07c7e520b1 The package @posthog/hedgehog-mode was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190923 Malicious code in mcp-use (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38bd6291f6f6d66e34397d1b1495513a53528efac94b63487a1646eb7aa45af The package mcp-use was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190884 Malicious code in @posthog/kinesis-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f869c9f2e7f4d35c729f506eb479a88bab7ca0dcd2aa6f2485319d87f39dd5 The package @posthog/kinesis-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190877 Malicious code in @posthog/event-sequence-timer-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db26ed26bc40e436602c36fa1c507d324e650f5aeba5a15875e59daadc8a5a14 The package @posthog/event-sequence-timer-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190869 Malicious code in @mcp-use/mcp-use (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0023b5bffd20d429759e1ae5215a619566250b2e0d2ebe4acd2e27e484d493 The package @mcp-use/mcp-use was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190919 Malicious code in @zapier/spectral-api-ruleset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f10a9695952f169fff0da94ca1ea47045d97dd486857aad5dbc7b608e2316b The package @zapier/spectral-api-ruleset was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190922 Malicious code in create-mcp-use-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2781601c3ba0c5d6d4b78bf322d88a4d189473e68d2382c171106342acacd271 The package create-mcp-use-app was found to contain malicious code. Source: google-open-source-security...