Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

MAL-2025-190932 Malicious code in @ensdomains/ens-test-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3393f85554fe6141b0f72e2f23d0940b102522348e71f60d407dc1471de8f6a9 The package @ensdomains/ens-test-env was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190866 Malicious code in @ensdomains/buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae46f5c19a843ced3c421c4ef2bb7fc8c6dc112240fc84abafd26405d0a85bf The package @ensdomains/buffer was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190925 Malicious code in posthog-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ec4a50c0b553e9abbcc25147ad50014cf1488415e1ec8e3234f3e9bb3cc24e The package posthog-node was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190896 Malicious code in @posthog/twitter-followers-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f5de01d0a45127f79e5f6db0ebea050e55f26d8ebbb38b72a4e422e6d3ecc6 The package @posthog/twitter-followers-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190917 Malicious code in @zapier/ai-actions-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0711da4a6c6d0dbc599d757b367430a63ae51f6f4fb48b6758fb21ba718b0778 The package @zapier/ai-actions-react was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190887 Malicious code in @posthog/nextjs-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413c527b7ca5fcc3cc28ad0195f527e99f9d0f1061994161eafba170450175b7 The package @posthog/nextjs-config was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190909 Malicious code in @postman/postman-mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c276129c0d99cb4f8aa63e9f3911b1f38145837396ac3b00ba48533a6050b8 The package @postman/postman-mcp-server was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190924 Malicious code in posthog-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317ab9fe546aa6930bf7fb3ee7c35c737d56963b41a4f3d4363abdb0ebfbfa49 The package posthog-docusaurus was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190906 Malicious code in @postman/pm-bin-windows-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ae17f856e11e19fc956689bbc3e88c8de0052e0ea1017d2048d92f20bfa91b The package @postman/pm-bin-windows-x64 was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190902 Malicious code in @postman/mcp-ui-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63316f530f87ac69078cc5b93dfdbc1a58d62f1f37a663f8bf40cb5489f4defc The package @postman/mcp-ui-client was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190918 Malicious code in @zapier/mcp-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b2f7745be8592869c863671add1d5a04c1d33f7a2c23a54fde611a5e021226 The package @zapier/mcp-integration was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190890 Malicious code in @posthog/react-rrweb-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7639d9bf4c377c1cb1bd2839d92cdc3ebdab0abb25b93f6b79914fc02634c2b4 The package @posthog/react-rrweb-player was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190898 Malicious code in @posthog/variance-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c9085321697fd859b0942dbf2e1f3d6ba0f4a32711bf0764e8c511c2b06df3 The package @posthog/variance-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190894 Malicious code in @posthog/taxonomy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6160bb29593f706f1623c9cc373f06290747d183e2d495f4d0afc169252d3046 The package @posthog/taxonomy-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190888 Malicious code in @posthog/pagerduty-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f138dd2e1bf5607f92e6db9b88a64a178880202726e7dccf9d2970644cf007 The package @posthog/pagerduty-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190880 Malicious code in @posthog/github-release-tracking-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb87af9bbf0349dfcf64e3a477f69780fd16d5d4d8e0269f263dc25214fd2f00 The package @posthog/github-release-tracking-plugin was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190873 Malicious code in @posthog/automatic-cohorts-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf3963e4ab04b6b37d6cbb3f237a7b5577ddd854a7249a30f8b78dcc063af97 The package @posthog/automatic-cohorts-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190905 Malicious code in @postman/pm-bin-macos-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af6b141ac3ae548c7fadfe1523b270a35c69e8f5c20035f682e9ee726f1bdec The package @postman/pm-bin-macos-x64 was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190885 Malicious code in @posthog/maxmind-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72a0e57ac542882acdc23de098c76f6992f6bdb14db9daac4a943c0ba262bd4 The package @posthog/maxmind-plugin was found to contain malicious code. Source: google-open-source-security...