https://advisories.gitlab.com/npm/@posthog/gitub-star-sync-plugin/GMS-2025-737/
@posthog/gitub-star-sync-plugin contains malware after npm account takeover | GitLab Advisory...
GMS-2025-737 @posthog/gitub-star-sync-plugin contains malware after npm account takeover: On November 24th 2025, a new supply chain attack called Shai-Hulud...