0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
tailwind-custom-forms
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting tailwind-custom-forms, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-12221 | Unknown | Malicious code in tailwind-custom-forms (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (0a94fe37df5952bc2326d9f0a759cf89d7105f47790fc71dc4731d87ec67a7f2) The package impersonates @tailwindcss/forms: package.json declares the name `tailwind-custom-forms` while the repository field points at `github.com/tailwindlabs/tailwindcss-forms` and src/index.js contains a verbatim copy of that legitimate plugin. Appended after `module.exports = forms;` is `eval(atob('<large base64 blob>'))`, which decodes and executes on any `require('tailwind-custom-forms')`. The decoded payload reconstructs the module |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (0a94fe37df5952bc2326d9f0a759cf89d7105f47790fc71dc4731d87ec67a7f2) The package impersonates @tailwindcss/forms: package.json declares the name `tailwind-custom-forms` while the repository field points at `github.com/tailwindlabs/tailwindcss-forms` and src/index.js contains a verbatim copy of that legitimate plugin. Appended after `module.exports = forms;` is `eval(atob('<large base64 blob>'))`, which decodes and executes on any `require('tailwind-custom-forms')`. The decoded payload reconstructs the module