No, just the host that was running the package (the exploit was pretty generic and not targeted at PostHog specifically). In fact, so far we think there were 0 production deployments of PostHog because the package was only live for a little bit.
Glad to hear the impact was so muted. Thank you for the response!
Glad to hear the impact was so muted. Thank you for the response!