278 matches found
Malicious code in @medusajs/analytics-posthog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bcda5a08e7631f3c8bdbfd1c6a827a23b4a2cadf1ca3ca3a1ae32674df5172 The package @medusajs/analytics-posthog was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191456 Malicious code in @medusajs/analytics-posthog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bcda5a08e7631f3c8bdbfd1c6a827a23b4a2cadf1ca3ca3a1ae32674df5172 The package @medusajs/analytics-posthog was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199299
Malicious code in @posthog/rrweb-replay npm...
MAL-2025-191299 Malicious code in @posthog/rrweb-replay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084c272e547764a91347a8436855b707a75409f57fde2692078e9edf5d9b703b The package @posthog/rrweb-replay was found to contain malicious code. Source: ghsa-malware...
Malicious code in @posthog/rrweb-replay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084c272e547764a91347a8436855b707a75409f57fde2692078e9edf5d9b703b The package @posthog/rrweb-replay was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199096
Malicious code in @posthog/plugin-server npm...
Malicious code in @posthog/plugin-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbacde545c940abfe63a0667580ea37cfc021d6b3e25094b71e23273cd899e1b The package @posthog/plugin-server was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190947 Malicious code in @posthog/plugin-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbacde545c940abfe63a0667580ea37cfc021d6b3e25094b71e23273cd899e1b The package @posthog/plugin-server was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199097
Malicious code in @posthog/drop-events-on-property-plugin npm...
Malicious code in @posthog/drop-events-on-property-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1dee879dbf8f8819008c31e641e4fec6584690087c6929cba530e9171464cb4 The package @posthog/drop-events-on-property-plugin was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190945 Malicious code in @posthog/clickhouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67710c7cf24d338618be2ab087d4c3b27117879492e29334b31cd0328e171a The package @posthog/clickhouse was found to contain malicious code. Source: ghsa-malware...
Malicious code in @posthog/clickhouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67710c7cf24d338618be2ab087d4c3b27117879492e29334b31cd0328e171a The package @posthog/clickhouse was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199098
Malicious code in @posthog/clickhouse npm...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-198934
Malicious code in @posthog/rrweb-player npm...
EUVD-2025-198939
Malicious code in @posthog/nextjs npm...
EUVD-2025-198946
Malicious code in @posthog/geoip-plugin npm...
EUVD-2025-198936
Malicious code in @posthog/plugin-unduplicates npm...