Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

EUVD-2026-3275

Malicious code in tailwin npm...

Malicious code in node-tailwind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33ff6b33caa8bdc3ee6c472bd1b239208b9fe59a85eecb30c997603310a8839 The package node-tailwind was found to contain malicious code. Source: ghsa-malware 81db0310d2ba64ce743a9bcf517fc3564612f97078d7b41ada94923aea6f8e4a...

Malicious code in @cb-global-design-system-tokens/tailwind (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f263b2c460c81b4e6f61cc1ce72351cf2f0b2d9ff3b745181715ca4296e22e2 The OpenSSF Package Analysis project identified '@cb-global-design-system-tokens/tailwind' @ 1.0.21 npm as malicious. It is considered malicious...