Malicious Package

Overview tailwind-classes-overrides is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in tailwind-classes-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3533ded19e56068694976a22ebcd933310fdb82d4b79857298b09a3f5e30389b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-scrollmenu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 670918a6780c8dfd5085225b5db85733fee0cfde4128583ec1c4028d9168b2bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47505 Malicious code in tailwind-scrollmenu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 670918a6780c8dfd5085225b5db85733fee0cfde4128583ec1c4028d9168b2bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tailwind-scrollmenu is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47444 Malicious code in tailwind-color-icon (npm)

The package tailwind-color-icon was found to contain malicious code...

Malicious code in tailwind-color-icon (npm)

The package tailwind-color-icon was found to contain malicious code...

Malicious code in @crowdstrike/tailwind-toucan-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815645af1286f8262a60ed5ee1cfb7b699786a707007300ea5c62602046d2460 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47237 Malicious code in @crowdstrike/tailwind-toucan-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815645af1286f8262a60ed5ee1cfb7b699786a707007300ea5c62602046d2460 Any computer that has this package installed or running should be considered fully compromised. All...

@crowdstrike/ember-toucan-styles (>=3.0.0 <=3.0.1) potentially affected by unknown CVE via @crowdstrike/tailwind-toucan-base (=5.0.0)

@crowdstrike/tailwind-toucan-base NPM version =5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @crowdstrike/tailwind-toucan-base and may be impacted: - @crowdstrike/ember-toucan-styles =3.0.0, =3.0.1 Source cves: unknown CVE Source advisory:...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Malicious code in tailwind-configs-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee3c791a92600ef66a7c4165e740bfeda8da8dad109a35e6db271d6fe07caf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tailwind-configs-viewer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

MAL-2025-47211 Malicious code in tailwind-configs-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee3c791a92600ef66a7c4165e740bfeda8da8dad109a35e6db271d6fe07caf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-classname-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 778af8e6403754b5650e5c08f6d16458ed8399f7cb2886350369e04ac242e07f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tailwind-classname-overrides is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-47104 Malicious code in tailwind-classname-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 778af8e6403754b5650e5c08f6d16458ed8399f7cb2886350369e04ac242e07f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tailwind-react-icon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in tailwind-react-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5127a22fb572ebcffe8d5b7a31ef0ceeedc9113e7e1666b1a23384f0ae3cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42140 Malicious code in tailwind-react-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5127a22fb572ebcffe8d5b7a31ef0ceeedc9113e7e1666b1a23384f0ae3cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...