VYPR

npm package

@posthog/github-release-tracking-plugin

pkg:npm/%40posthog/github-release-tracking-plugin

Malware

2 malicious versions on record

One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.

  • GHSA-2w57-xqr2-mc2wMalware in @posthog/github-release-tracking-plugin
    Nov 24, 2025
  • MAL-2025-190880Malicious code in @posthog/github-release-tracking-plugin (npm)
    Nov 24, 2025

Vulnerabilities (0)

No CVEs are currently linked to this package.