MAL-2025-190902 Malicious code in @postman/mcp-ui-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63316f530f87ac69078cc5b93dfdbc1a58d62f1f37a663f8bf40cb5489f4defc The package @postman/mcp-ui-client was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198949

Malicious code in @posthog/databricks-plugin npm...

EUVD-2025-198959

Malicious code in @ensdomains/buffer npm...

EUVD-2025-198904

Malicious code in mcp-use npm...

EUVD-2025-198905

Malicious code in create-mcp-use-app npm...

EUVD-2025-198931

Malicious code in @posthog/taxonomy-plugin npm...

Malicious code in capacitor-voice-recorder-wav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d039d86e89d2e74c80f640d3c4dc358a5e3fc0b972d07a1d08b9c5dee3dad9 The package capacitor-voice-recorder-wav was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198925

Malicious code in @posthog/wizard npm...

Malicious code in @postman/pretty-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d31f7cbd143304b0472244ba5f73daa6e96abbc923b854d2736c5ea7807d16 The package @postman/pretty-ms was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/first-time-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0fbb010dddd152c8b71f6919fd4d3e53999bd09a5354ce3411cb45caa8106a The package @posthog/first-time-event-tracker was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79eae844852de94f0a7cd6826f344e60fe40945cdacfaa3d3d589c965ade4ad1 The package @posthog/nextjs was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198910

Malicious code in @zapier/ai-actions-react npm...

EUVD-2025-198928

Malicious code in @posthog/url-normalizer-plugin npm...

MAL-2025-190880 Malicious code in @posthog/github-release-tracking-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb87af9bbf0349dfcf64e3a477f69780fd16d5d4d8e0269f263dc25214fd2f00 The package @posthog/github-release-tracking-plugin was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198923

Malicious code in @postman/mcp-ui-client npm...

Malicious code in @mparpaillon/imagesloaded (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733f9cddc9163f876de6db1b1dab8c6325aa55f34f478662321875c52f242ea4 The package @mparpaillon/imagesloaded was found to contain malicious code...

EUVD-2025-198903

Malicious code in posthog-docusaurus npm...

Malicious code in @zapier/ai-actions-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0711da4a6c6d0dbc599d757b367430a63ae51f6f4fb48b6758fb21ba718b0778 The package @zapier/ai-actions-react was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ed05e891884ed2cf2d6f1790352cd3d07f97a03c6fb152561eb2e8b9d938c2 The package @posthog/wizard was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/plugin-unduplicates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c908d2f59bb746353f63ff6561e3e99d8055d86ee72332228bfd40f24b8dad0 The package @posthog/plugin-unduplicates was found to contain malicious code. Source: google-open-source-security...