npm
Maliciousposthog-plugin-hello-world@1.0.1
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 12:44 PM UTC
OSV ID
MAL-2025-190778
Ecosystem
npm
Summary
The package posthog-plugin-hello-world was found to contain malicious code.
Source: amazon-inspector (411e53a1772704343ddb3da6957e8e0ee4e8167ec93030bf27e2247081fddc61)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.