MAL-2026-17666 Malicious code in animatecss-tailwind-bridge (npm)

animatecss-tailwind-bridge 2.0.6 was published to npm on 2026-09-13 by the account bennetwild. The package is part of a fake job interview campaign that targets developers, using the same method as the "Contagious Interview" campaign. A fake company sends a take-home coding assessment repository...

MAL-2026-17667 Malicious code in tailwind-animatecss-uniform (npm)

tailwind-animatecss-uniform 2.0.7 was published to npm on 2026-09-28 by the account ares0320. The package is part of a fake job interview campaign that targets developers, using the same method as the "Contagious Interview" campaign. A fake company sends a take-home coding assessment repository...

MAL-2026-13604 Malicious code in tailwindcss-motion-advanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8426c39ffcba11d95e8ede8085ce260dbcf8527544ce9ca3a1d7a59618f0eb On require of the package's main entry, lib/utils.min.js queries Ethereum RPC endpoints eth.blockscout.com/api, 1rpc.io/eth, eth.drpc.org,...

JLSEC-2026-793 Hugo's Node tool execution allows file system access outside the project directory

Impact When building a Hugo site that uses Node-based asset pipelines PostCSS, Babel, TailwindCSS, Hugo invoked the configured Node tools without restrictions on file system access. As a result, executing hugo against an untrusted site could allow code running through these tools to read or write...

portofolio_DWForSec

DwF — Cybersecurity Portfolio A professional cybersecurity po...

Malicious code in tailwindcss-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ee27d0caf9bfc7ff677eb3a3ab32742a19c31bc8418b532bbf925c6a5c385b The package tailwindcss-forms was found to contain malicious code...

EUVD-2025-116648

Malicious code in antd-ganymede-iota-tailwindcss npm...

EUVD-2025-112083

Malicious code in juno-loopback-tailwindcss-blitz npm...

EUVD-2025-121476

Malicious code in tailwindcss-rehype-nightmare-prettier-plugin-markdown npm...

EUVD-2025-38227

Malicious code in tailwindcss-aerowind npm...

EUVD-2025-19665

Malicious code in bioql PyPI...

Malicious code in misk-tailwind-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 567443deccb6eabc476eeb33858fd2ea51f98ab82ab3a814e02bacda56979a09 The OpenSSF Package Analysis project identified 'misk-tailwind-css' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...