0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
tw-fluid-type
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting tw-fluid-type, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-5638 | Unknown | Malicious code in tw-fluid-type (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (5c3bc3497d6c683f52210ca201500d27cf9e2bcccd976883be2ed85d17569b54) The package advertises itself as a Tailwind CSS fluid-type plugin but ships src/utils/lib.min.js, which is loaded as a side effect when the package's main entry point is required. createClasses.js (reached from src/index.js) does `const lib = require('./lib.min.js')` and never uses the returned value — the only purpose of the require is to trigger the file's IIFE. lib.min.js caches `global.r = require` and `global.m = module`, then runs a ~ |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (5c3bc3497d6c683f52210ca201500d27cf9e2bcccd976883be2ed85d17569b54) The package advertises itself as a Tailwind CSS fluid-type plugin but ships src/utils/lib.min.js, which is loaded as a side effect when the package's main entry point is required. createClasses.js (reached from src/index.js) does `const lib = require('./lib.min.js')` and never uses the returned value — the only purpose of the require is to trigger the file's IIFE. lib.min.js caches `global.r = require` and `global.m = module`, then runs a ~