MAL-2026-16139 Malicious code in tailwind-form-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb2aed2f968e146b433d2a2600f17104f0dcacfd951190771f8e59aee3a252 [email protected] impersonates @tailwindcss/forms package.json sets repository to https://github.com/tailwindlabs/tailwindcss-forms but...

MAL-2026-16052 Malicious code in open-item-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba5b55d57f4938bf2494d369d14434bb80ba6f6c712c7f8d89ae773c27dc457 On require, index.js spawns a detached, unref'd background Node process lib/check-items.js that repeatedly HTTP-GETs a JSON payload from...