MAL-2026-14189 Malicious code in tailwind-extension-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7048fbbdab179b32cf7705e06d396bc0fb6a04df45872a6119324a545d8d03db Package is presented as a Tailwind CSS utility, but its default export getPlugin fetches JSON from a hardcoded bare-IP endpoint...

MAL-2026-14037 Malicious code in tailwind-plugin-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e480310d422f93f8558763cca56b726148c94b19e20eec879f0786c01c264af The package presents itself as a Tailwind CSS plugin toolkit but its exported getPlugin function performs an HTTPS request to a hardcoded bare-IP...

Malicious code in tailwind-plugin-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e480310d422f93f8558763cca56b726148c94b19e20eec879f0786c01c264af The package presents itself as a Tailwind CSS plugin toolkit but its exported getPlugin function performs an HTTPS request to a hardcoded bare-IP...

Malicious code in tailwind-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afeb355b3088d1c03dbbb5a60c1afea5afbe3a384f50417ae6cfa7340d8c072d The package presents itself as a Tailwind CSS plugin, but its default export which runs when users register it in tailwind.config issues an HTTPS...

MAL-2026-14038 Malicious code in tailwind-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afeb355b3088d1c03dbbb5a60c1afea5afbe3a384f50417ae6cfa7340d8c072d The package presents itself as a Tailwind CSS plugin, but its default export which runs when users register it in tailwind.config issues an HTTPS...

Malicious Package

Overview tailwind-form-templates is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

MAL-2026-13923 Malicious code in tailwind-form-templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8febe917c3076e12756acd284d92cd2810cb59f7c546a6e669ef23caa56457bc The package name resembles @tailwindcss/forms and its src/index.js copies the legitimate @tailwindcss/forms source, appending an evalatob... payload...

Malicious code in tailwind-form-templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8febe917c3076e12756acd284d92cd2810cb59f7c546a6e669ef23caa56457bc The package name resembles @tailwindcss/forms and its src/index.js copies the legitimate @tailwindcss/forms source, appending an evalatob... payload...

Malicious Package

Overview tailwind-elements-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in tailwind-elements-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f8605cff87e89b9f1a50c65fc27af278335cf414a8b4fb52ea4090e9fdd71b No malicious behavior was identified in the package contents. The package name resembles popular Tailwind-related UI libraries, which can indicate...

MAL-2026-13727 Malicious code in tailwind-elements-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f8605cff87e89b9f1a50c65fc27af278335cf414a8b4fb52ea4090e9fdd71b No malicious behavior was identified in the package contents. The package name resembles popular Tailwind-related UI libraries, which can indicate...

MAL-2026-13604 Malicious code in tailwindcss-motion-advanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8426c39ffcba11d95e8ede8085ce260dbcf8527544ce9ca3a1d7a59618f0eb On require of the package's main entry, lib/utils.min.js queries Ethereum RPC endpoints eth.blockscout.com/api, 1rpc.io/eth, eth.drpc.org,...

Malicious code in tailwindcss-hide-scrollbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac906893a6ea1562025bfa35bf4f1998cfd745619f21c4dc3880aa386dc3cfe1 dist/index.js exports a small tailwind scrollbar-hide plugin followed by a trailing evalatob'' that executes on every require/import of the package...

MAL-2026-12192 Malicious code in scrollbar-hide-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f19e1731b591552a096b108703702b9663c1bbb8cf9c2ff6fc048f8582e8607 The package's main entry dist/index.js appends an obfuscated payload — wrapped in evalatob... with require targets and URLs hidden in \uXXXX escapes ...

Malicious code in tailwind-animation-founder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212392bc085368a2f4227f1cba627c6dd4629855bb5f3aa3529931d35f13ed21 The package publishes as 'tailwind-animation-founder' while its README, homepage, and npm badges point to a differently-named upstream...

Malicious code in tailwind-opentype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5a3e0b9f27817cc8e965ed397d0ec2a01b2e13f26051ee6c0e884fa5008beb dist/index.js re-exports a benign Tailwind plugin and appends an evalatob... payload that runs when the module is required e.g. from a project's...

MAL-2026-12222 Malicious code in tailwind-opentype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5a3e0b9f27817cc8e965ed397d0ec2a01b2e13f26051ee6c0e884fa5008beb dist/index.js re-exports a benign Tailwind plugin and appends an evalatob... payload that runs when the module is required e.g. from a project's...

Malicious code in tailwind-custom-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a94fe37df5952bc2326d9f0a759cf89d7105f47790fc71dc4731d87ec67a7f2 The package impersonates @tailwindcss/forms: package.json declares the name tailwind-custom-forms while the repository field points at...

MAL-2026-12221 Malicious code in tailwind-custom-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a94fe37df5952bc2326d9f0a759cf89d7105f47790fc71dc4731d87ec67a7f2 The package impersonates @tailwindcss/forms: package.json declares the name tailwind-custom-forms while the repository field points at...

Malicious code in tailwind-animationpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63abd5591507bb96b45cdf17209563ccfe52015a0bb8c5258bf3ea8cdc034fb3 src/index.js appends an obfuscated evalatob... block after a legitimate-looking Tailwind plugin export. The decoded loader hides module names and...