@posthog/plugin-server

v1.10.7npm· JavaScript

PostHog Plugin Server

The verdict

Has 2 high-severity advisories. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityNiche

Security2 advisories

LicensePermissive

DepsHeavy

Maintenance

Last published 4 years ago.

Popularity

930 downloads / week

Security

2 known advisories (worst: high severity).

License

MIT

Dependencies

40 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
PostHog Plugin Server SQL Injection Vulnerability
GHSA-v64v-fq96-c5wv Published 2025-04-23
UNKNOWN
Malicious code in @posthog/plugin-server (npm)
MAL-2025-190947 Published 2025-11-24

Recent releases