Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2026/09/10 6:31 p.m.•9 views

Malicious code in tailwindcss-contact-forms (npm)

Source: amazon-inspector cc68c81374c5b78e36fea2f599c5e0004ead6e56dfd02b40cec4f73c62193b30 The package presents itself as a Tailwind CSS forms plugin README, repository field, and installation docs are copied verbatim from @tailwindcss/forms but its sole main module src/index.js is a heavily...

6.1AI score
SaveExploits0References13Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/10 6:05 p.m.•58 views

Malicious code in tailwindcss-contact-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc68c81374c5b78e36fea2f599c5e0004ead6e56dfd02b40cec4f73c62193b30 The package presents itself as a Tailwind CSS forms plugin README, repository field, and installation docs are copied verbatim from @tailwindcss/form...

6AI score
SaveExploits0References9
osv_mal
osv_mal
•added 2026/09/10 6:05 p.m.•37 views

MAL-2026-16124 Malicious code in tailwindcss-contact-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc68c81374c5b78e36fea2f599c5e0004ead6e56dfd02b40cec4f73c62193b30 The package presents itself as a Tailwind CSS forms plugin README, repository field, and installation docs are copied verbatim from @tailwindcss/form...

6AI score
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2026/09/10 5:37 p.m.•7 views

Malware in tailwindcss-contact-forms

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/07/27 10:59 p.m.•18 views

Malicious Package

Overview tailwindcss-contact-forms is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder