npm
Malicious@posthog/bitbucket-release-tracker@0.0.8
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 10:42 AM UTC
OSV ID
MAL-2025-191289
Ecosystem
npm
Summary
The package @posthog/bitbucket-release-tracker was found to contain malicious code.
Source: amazon-inspector (7cd4323384e4b29aac2ac56b7eea22bbaafb8579a013ff55f7d7b26f0c972a0a)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.