EUVD-2025-198958

Malicious code in @mcp-use/cli npm...

EUVD-2025-198950

Malicious code in @posthog/customerio-plugin npm...

EUVD-2025-198939

Malicious code in @posthog/nextjs npm...

EUVD-2025-198932

Malicious code in @posthog/snowflake-export-plugin npm...

EUVD-2025-198928

Malicious code in @posthog/url-normalizer-plugin npm...

EUVD-2025-198922

Malicious code in @postman/pm-bin-linux-x64 npm...

EUVD-2025-198915

Malicious code in @postman/pretty-ms npm...

EUVD-2025-198905

Malicious code in create-mcp-use-app npm...

EUVD-2025-198902

Malicious code in posthog-node npm...

Malicious code in mcp-use (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38bd6291f6f6d66e34397d1b1495513a53528efac94b63487a1646eb7aa45af The package mcp-use was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198911

Malicious code in @seung-ju/react-native-action-sheet npm...

Malicious code in @postman/pm-bin-macos-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9784306ff54e49967977f9fc58b5d335de3a19434cc7d7d277ee8097ef3079d The package @postman/pm-bin-macos-arm64 was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/web-dev-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8d0531931bec7f4add3b4f255b7f6572d28ff3edf2774f7d076fde394eb405 The package @posthog/web-dev-server was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ed05e891884ed2cf2d6f1790352cd3d07f97a03c6fb152561eb2e8b9d938c2 The package @posthog/wizard was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198929

Malicious code in @posthog/twitter-followers-plugin npm...

EUVD-2025-198925

Malicious code in @posthog/wizard npm...

Malicious code in @mparpaillon/page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc632dc769c1c17211f5a14d8e9f40217a70b214e5a367f0ab8fccc939332a1 The package @mparpaillon/page was found to contain malicious code...

MAL-2025-190872 Malicious code in @mparpaillon/page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc632dc769c1c17211f5a14d8e9f40217a70b214e5a367f0ab8fccc939332a1 The package @mparpaillon/page was found to contain malicious code...

MAL-2025-190900 Malicious code in @posthog/wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ed05e891884ed2cf2d6f1790352cd3d07f97a03c6fb152561eb2e8b9d938c2 The package @posthog/wizard was found to contain malicious code. Source: google-open-source-security...

Malicious code in @postman/pretty-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d31f7cbd143304b0472244ba5f73daa6e96abbc923b854d2736c5ea7807d16 The package @postman/pretty-ms was found to contain malicious code. Source: google-open-source-security...