Malicious code in @thebros/create-benjamin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53fb816939bb505cdabc374418983428298b09a29e5789033943301642b8b156 The package tarball ships a .env file containing a live-looking OpenAI API key OPENAIAPIKEY=sk-proj-.... The CLI entry point bin/index.js calls impor...

MAL-2025-46192 Malicious code in tailwindcss-tailwindcss-dotenv-safe-less-loader (npm)

The package tailwindcss-tailwindcss-dotenv-safe-less-loader was found to contain malicious code...