5 matches found
MAL-2026-14512 Malicious code in tailwind-scrollbar-hider (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa2dba899c9723740dfcc2fe8588bcf695f021442bbe8de1156239029bf7987 dist/index.js exports a small legitimate scrollbarHide Tailwind plugin and then executes evalatob'' at module top level, so the payload runs on any...
Malicious code in tailwind-scrollbar-hider (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa2dba899c9723740dfcc2fe8588bcf695f021442bbe8de1156239029bf7987 dist/index.js exports a small legitimate scrollbarHide Tailwind plugin and then executes evalatob'' at module top level, so the payload runs on any...
Malware in tailwind-scrollbar-hider
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MSC-2026-11442
Malicious code embedded in a trojanized package. tailwind-scrollbar-hider 5.0.2 is a typosquat of tailwind-scrollbar-hide. Its dist/index.js the package main keeps the legitimate one-line scrollbar CSS utility but appends evalatob... that runs at import time no install hook required. The decoded...
Malicious Package
Overview tailwind-scrollbar-hider is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...