Malicious code in tailwind-plugin-kit (npm)

Source: amazon-inspector 3e480310d422f93f8558763cca56b726148c94b19e20eec879f0786c01c264af The package presents itself as a Tailwind CSS plugin toolkit but its exported getPlugin function performs an HTTPS request to a hardcoded bare-IP endpoint 31.97.137.157:45000/icons/109 and passes the...