Lucene search
+L

5 matches found

osv_mal
osv_mal
•added 2026/08/25 4:33 p.m.•20 views

MAL-2026-14512 Malicious code in tailwind-scrollbar-hider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa2dba899c9723740dfcc2fe8588bcf695f021442bbe8de1156239029bf7987 dist/index.js exports a small legitimate scrollbarHide Tailwind plugin and then executes evalatob'' at module top level, so the payload runs on any...

5.7AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/25 4:33 p.m.•28 views

Malicious code in tailwind-scrollbar-hider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa2dba899c9723740dfcc2fe8588bcf695f021442bbe8de1156239029bf7987 dist/index.js exports a small legitimate scrollbarHide Tailwind plugin and then executes evalatob'' at module top level, so the payload runs on any...

5.6AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/08/25 4:33 p.m.•5 views

Malware in tailwind-scrollbar-hider

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Mend
Mend
•added 2026/08/25 1:45 p.m.•8 views

MSC-2026-11442

Malicious code embedded in a trojanized package. tailwind-scrollbar-hider 5.0.2 is a typosquat of tailwind-scrollbar-hide. Its dist/index.js the package main keeps the legitimate one-line scrollbar CSS utility but appends evalatob... that runs at import time no install hook required. The decoded...

9.8CVSS5.8AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/08/24 6:30 a.m.•15 views

Malicious Package

Overview tailwind-scrollbar-hider is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.9AI score
SaveExploits0References2
Rows per page
Query Builder