0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
motion-forge-css
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting motion-forge-css, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-11101 | Unknown | Malicious code in motion-forge-css (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6f9c883a4865db328dff8b43c279a353b6ad494416a665e0201fdca7b6ba4daa) Package advertises itself as a small PostCSS vendor-prefix / CSS-variable-injection plugin but ships a single ~105KB obfuscator.io-packed bundle as its main entry (index.js), loaded on every require('motion-forge-css'). The bundle uses a 912-entry rotated string array, string-decoder, self-defending / anti-debug wrapper, and an inline base64 alphabet — none of which are required to add CSS vendor prefixes. The bundle also contains a plainte |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6f9c883a4865db328dff8b43c279a353b6ad494416a665e0201fdca7b6ba4daa) Package advertises itself as a small PostCSS vendor-prefix / CSS-variable-injection plugin but ships a single ~105KB obfuscator.io-packed bundle as its main entry (index.js), loaded on every require('motion-forge-css'). The bundle uses a 912-entry rotated string array, string-decoder, self-defending / anti-debug wrapper, and an inline base64 alphabet — none of which are required to add CSS vendor prefixes. The bundle also contains a plainte