Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2026/10/09 3:21 p.m.•22 views

Malware in tailwind-animatecss-uniform

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/10/08 6:31 a.m.•10 views

Malicious Package

Overview tailwind-animatecss-uniform is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/10/08 6:31 a.m.•8 views

Malicious code in tailwind-animatecss-uniform (npm)

tailwind-animatecss-uniform 2.0.7 was published to npm on 2026-09-28 by the account ares0320. The package is part of a fake job interview campaign that targets developers, using the same method as the "Contagious Interview" campaign. A fake company sends a take-home coding assessment repository...

5.8AI score
SaveExploits0References5Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/07 6:36 p.m.•21 views

Malicious code in tailwind-animatecss-uniform (npm)

tailwind-animatecss-uniform 2.0.7 was published to npm on 2026-09-28 by the account ares0320. The package is part of a fake job interview campaign that targets developers, using the same method as the "Contagious Interview" campaign. A fake company sends a take-home coding assessment repository...

5.8AI score
SaveExploits0References4
osv_mal
osv_mal
•added 2026/10/07 6:36 p.m.•21 views

MAL-2026-17667 Malicious code in tailwind-animatecss-uniform (npm)

tailwind-animatecss-uniform 2.0.7 was published to npm on 2026-09-28 by the account ares0320. The package is part of a fake job interview campaign that targets developers, using the same method as the "Contagious Interview" campaign. A fake company sends a take-home coding assessment repository...

5.8AI score
SaveExploits0References4
Rows per page
Query Builder