Malicious code in @posthog/geoip-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ea0a6028390c3a43f98bcd7b2afa97a6f1fae311e31138717c69d610c4c8a2 The package @posthog/geoip-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190879 Malicious code in @posthog/geoip-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ea0a6028390c3a43f98bcd7b2afa97a6f1fae311e31138717c69d610c4c8a2 The package @posthog/geoip-plugin was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198946

Malicious code in @posthog/geoip-plugin npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...