npm
Malicious@posthog/geoip-plugin@0.0.8
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 5:45 PM UTC
OSV ID
MAL-2025-190879
Ecosystem
npm
Summary
The package @posthog/geoip-plugin was found to contain malicious code.
Source: amazon-inspector (52ea0a6028390c3a43f98bcd7b2afa97a6f1fae311e31138717c69d610c4c8a2)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.