EUVD-2025-198936

Malicious code in @posthog/plugin-unduplicates npm...

Malicious code in @posthog/snowflake-export-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64fb205150fc65f2334ab9ca1530bec4ef2d4dfea99ca328bfda4c70063ed793 The package @posthog/snowflake-export-plugin was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/customerio-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5c661564ccb733d65528965f85302bd0153cc1e8a4e3807e67eb528d73cd55 The package @posthog/customerio-plugin was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198902

Malicious code in posthog-node npm...

EUVD-2025-198926

Malicious code in @posthog/web-dev-server npm...

EUVD-2025-198930

Malicious code in @posthog/twilio-plugin npm...

EUVD-2025-198946

Malicious code in @posthog/geoip-plugin npm...

EUVD-2025-198939

Malicious code in @posthog/nextjs npm...

Malicious code in @posthog/web-dev-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8d0531931bec7f4add3b4f255b7f6572d28ff3edf2774f7d076fde394eb405 The package @posthog/web-dev-server was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/gitub-star-sync-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be422ec924addbeb23c34a8b3305835feb3d665ab57afdc1450734d0b10f5a4 The package @posthog/gitub-star-sync-plugin was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198934

Malicious code in @posthog/rrweb-player npm...

Malicious code in @posthog/react-rrweb-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7639d9bf4c377c1cb1bd2839d92cdc3ebdab0abb25b93f6b79914fc02634c2b4 The package @posthog/react-rrweb-player was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198948

Malicious code in @posthog/event-sequence-timer-plugin npm...

EUVD-2025-198945

Malicious code in @posthog/github-release-tracking-plugin npm...

EUVD-2025-198949

Malicious code in @posthog/databricks-plugin npm...

EUVD-2025-198937

Malicious code in @posthog/pagerduty-plugin npm...

EUVD-2025-198952

Malicious code in @posthog/automatic-cohorts-plugin npm...

MAL-2025-190887 Malicious code in @posthog/nextjs-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413c527b7ca5fcc3cc28ad0195f527e99f9d0f1061994161eafba170450175b7 The package @posthog/nextjs-config was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190890 Malicious code in @posthog/react-rrweb-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7639d9bf4c377c1cb1bd2839d92cdc3ebdab0abb25b93f6b79914fc02634c2b4 The package @posthog/react-rrweb-player was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190892 Malicious code in @posthog/sendgrid-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538f52ec82c02a69031b8b84a1e12b2d22ee68462c722f9dd4a8ea07d4e81d44 The package @posthog/sendgrid-plugin was found to contain malicious code. Source: google-open-source-security...