MAL-2025-190883 Malicious code in @posthog/ingestion-alert-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8eecfada0b8b32fc4e69b17399fba304ef75a1cf7ad1e2fabbf1eabdd10a5c The package @posthog/ingestion-alert-plugin was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/automatic-cohorts-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf3963e4ab04b6b37d6cbb3f237a7b5577ddd854a7249a30f8b78dcc063af97 The package @posthog/automatic-cohorts-plugin was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/twitter-followers-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f5de01d0a45127f79e5f6db0ebea050e55f26d8ebbb38b72a4e422e6d3ecc6 The package @posthog/twitter-followers-plugin was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198942

Malicious code in @posthog/ingestion-alert-plugin npm...

EUVD-2025-198950

Malicious code in @posthog/customerio-plugin npm...

EUVD-2025-198935

Malicious code in @posthog/react-rrweb-player npm...

EUVD-2025-198929

Malicious code in @posthog/twitter-followers-plugin npm...

Malicious code in @posthog/taxonomy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6160bb29593f706f1623c9cc373f06290747d183e2d495f4d0afc169252d3046 The package @posthog/taxonomy-plugin was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/variance-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c9085321697fd859b0942dbf2e1f3d6ba0f4a32711bf0764e8c511c2b06df3 The package @posthog/variance-plugin was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/sendgrid-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538f52ec82c02a69031b8b84a1e12b2d22ee68462c722f9dd4a8ea07d4e81d44 The package @posthog/sendgrid-plugin was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198901

Malicious code in posthog-react-native npm...

EUVD-2025-198938

Malicious code in @posthog/nextjs-config npm...

EUVD-2025-198941

Malicious code in @posthog/kinesis-plugin npm...

EUVD-2025-198932

Malicious code in @posthog/snowflake-export-plugin npm...

Malicious code in posthog-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc429049d0797390f57bc821cabd2d46fad88c5363136fc96bab4b5497000fe The package posthog-react-native was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/databricks-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e391efe36d6c40d46f8c9abbf9d68a3b7b73a56319db5a85a486fedfe90cb394 The package @posthog/databricks-plugin was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/kinesis-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f869c9f2e7f4d35c729f506eb479a88bab7ca0dcd2aa6f2485319d87f39dd5 The package @posthog/kinesis-plugin was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/rrweb-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d82edc82839a426c18772dee75ba0a7a9601a053fa6a20b3e7e4b48ac3768d9 The package @posthog/rrweb-player was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198933

Malicious code in @posthog/sendgrid-plugin npm...

MAL-2025-190884 Malicious code in @posthog/kinesis-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f869c9f2e7f4d35c729f506eb479a88bab7ca0dcd2aa6f2485319d87f39dd5 The package @posthog/kinesis-plugin was found to contain malicious code. Source: google-open-source-security...