Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2026/10/20 9:48 p.m.•12 views

Malware in animatecss-tailwind-bridge

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/10/08 6:31 a.m.•11 views

Malicious Package

Overview animatecss-tailwind-bridge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/10/08 6:31 a.m.•7 views

Malicious code in animatecss-tailwind-bridge (npm)

animatecss-tailwind-bridge 2.0.6 was published to npm on 2026-09-13 by the account bennetwild. The package is part of a fake job interview campaign that targets developers, using the same method as the "Contagious Interview" campaign. A fake company sends a take-home coding assessment repository...

5.8AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/07 6:36 p.m.•20 views

Malicious code in animatecss-tailwind-bridge (npm)

animatecss-tailwind-bridge 2.0.6 was published to npm on 2026-09-13 by the account bennetwild. The package is part of a fake job interview campaign that targets developers, using the same method as the "Contagious Interview" campaign. A fake company sends a take-home coding assessment repository...

5.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/07 6:36 p.m.•23 views

MAL-2026-17666 Malicious code in animatecss-tailwind-bridge (npm)

animatecss-tailwind-bridge 2.0.6 was published to npm on 2026-09-13 by the account bennetwild. The package is part of a fake job interview campaign that targets developers, using the same method as the "Contagious Interview" campaign. A fake company sends a take-home coding assessment repository...

5.8AI score
SaveExploits0References2
Rows per page
Query Builder