@posthog/github-release-tracking-plugin
MAL-2025-190880
npmmalware11/24/2025
Description
Malicious code in @posthog/github-release-tracking-plugin (npm)
Indicators of Compromise
SHA256 Hashes (3)
fb87af9bbf0349dfcf64e3a477f69780fd16d5d4d8e0269f263dc25214fd2f00
5d38e89c69b6eac8aebc8f485aa09e2d8783000c8324920f639378f880c12c28
633309ac984a3f2c388d75fac290e6aa746a3d0c5ce236c7b504b23f1e7f0c12
References (4)
https://github.com/advisories/GHSA-2w57-xqr2-mc2wOSVhttps://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomainsOSVhttps://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attackOSVhttps://www.stepsecurity.io/blog/sha1-hulud-the-second-coming-zapier-ens-domains-and-other-prominent-npm-packages-compromisedOSV
Details
Ecosystemnpm
Attack Typemalware
Published11/24/2025
Aliases
GHSA-2w57-xqr2-mc2w
Quick Actions