Supply Chain Incidents

MAL-2025-190926

Malicious code in posthog-react-native (npm)

MAL-2025-190875

Malicious code in @posthog/customerio-plugin (npm)

MAL-2025-190925

Malicious code in posthog-node (npm)

MAL-2025-190921

Malicious code in capacitor-voice-recorder-wav (npm)

MAL-2025-190923

Malicious code in mcp-use (npm)

MAL-2025-190900

Malicious code in @posthog/wizard (npm)

MAL-2025-190912

Malicious code in @postman/wdio-allure-reporter (npm)

MAL-2025-190906

Malicious code in @postman/pm-bin-windows-x64 (npm)

MAL-2025-190877

Malicious code in @posthog/event-sequence-timer-plugin (npm)

MAL-2025-190890

Malicious code in @posthog/react-rrweb-player (npm)

MAL-2025-190901

Malicious code in @postman/final-node-keytar (npm)

MAL-2025-190881

Malicious code in @posthog/gitub-star-sync-plugin (npm)

MAL-2025-190869

Malicious code in @mcp-use/mcp-use (npm)

MAL-2025-190879

Malicious code in @posthog/geoip-plugin (npm)

MAL-2025-190919

Malicious code in @zapier/spectral-api-ruleset (npm)

MAL-2025-190874

Malicious code in @posthog/currency-normalization-plugin (npm)

MAL-2025-190915

Malicious code in @seung-ju/react-native-action-sheet (npm)

MAL-2025-190872

Malicious code in @mparpaillon/page (npm)

MAL-2025-190868

Malicious code in @mcp-use/inspector (npm)

MAL-2025-190878

Malicious code in @posthog/first-time-event-tracker (npm)

MAL-2025-190902

Malicious code in @postman/mcp-ui-client (npm)

MAL-2025-190897

Malicious code in @posthog/url-normalizer-plugin (npm)

MAL-2025-190894

Malicious code in @posthog/taxonomy-plugin (npm)

MAL-2025-190866

Malicious code in @ensdomains/buffer (npm)