0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
tailwind-input-kit
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting tailwind-input-kit, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-18595 | Unknown | Malicious code in tailwind-input-kit (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (630101a331666e0b23f3bf13fc5b6390d361ccc4be631c55f6ea29d10f3f7711) The package impersonates @tailwindcss/forms (name 'tailwind-input-kit', author.name '@tailwindcss', repository pointing to github.com/tailwindlabs/tailwindcss-forms, with README/HTML/CHANGELOG copied from the official plugin) while prepending a malicious loader to src/index.js. The file begins with eval(atob('<~50KB base64 blob>')) that executes before any legitimate plugin code is reached on require(). The decoded blob is a heavily _0x-obf |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (630101a331666e0b23f3bf13fc5b6390d361ccc4be631c55f6ea29d10f3f7711) The package impersonates @tailwindcss/forms (name 'tailwind-input-kit', author.name '@tailwindcss', repository pointing to github.com/tailwindlabs/tailwindcss-forms, with README/HTML/CHANGELOG copied from the official plugin) while prepending a malicious loader to src/index.js. The file begins with eval(atob('<~50KB base64 blob>')) that executes before any legitimate plugin code is reached on require(). The decoded blob is a heavily _0x-obf