MAL-2026-11044 Malicious code in tailwind-gutenberg-block-zero (npm)

The npm package tailwind-gutenberg-block-zero is a supply-chain dropper disguised as a WordPress / Gutenberg block plugin. The published tarball carries the trappings of a real plugin a my-tailwind-blocks.php, a wp-scripts build configuration, a README and a screenshot, but its real behaviour liv...

MAL-2026-10761 Malicious code in my-tailwind-gutenberg-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 964a3f6c00b9b203b2ce5d2bf2a913e877d136325b805010ef3615c2dcc6a52a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...