npm
Malicious@posthog/customerio-plugin@0.0.8
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 11:44 AM UTC
OSV ID
MAL-2025-190875
Ecosystem
npm
Summary
The package @posthog/customerio-plugin was found to contain malicious code.
Source: amazon-inspector (3c5c661564ccb733d65528965f85302bd0153cc1e8a4e3807e67eb528d73cd55)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.