Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-176073

Malicious code in tailwindcss-bulma-vuetify-zenobia npm...

EUVD-2025-121478

Malicious code in tailwindcss-playwright-lacerta-hapi npm...

Malicious code in tailwindcss-tailwindcss-dotenv-safe-less-loader (npm)

The package tailwindcss-tailwindcss-dotenv-safe-less-loader was found to contain malicious code...