tailwindcss-3d-animate@1.1.0: Malicious npm security report

Loading npm security reports…

tailwindcss-3d-animate@1.1.0: Malicious npm security report | LPM Firewall

Source & flagged code

3 flagged

15"peerDependencies": { "tailwindcss": ">=3.2.0 <4.0.0" }, "dependencies": { "@swc/helpers": "0.5.17", "lodash": "4.17.21" }, "main": "index.js",

High

Suspicious Lifecycle Evidence

The manifest has no lifecycle scripts and exposes only index.js.

package.jsonView on unpkg · L15

index.jsView file

26var tailwindCss3d = _plugin.default.withOptions(function() { var _ref = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : optionDefaults, _ref_legacy = _ref.legacy, legacy = _ref_legacy === void 0 ? optionDefaults.legacy : _ref_legacy; var safeLegacy = (0, _ensure.ensureBoolean)(legacy, optionDefaults.legacy); return function(api) { var localAPI = api; // Replace the transform core plugin defaults and add some new ones localAPI.addDefaults('transform', DEFAULT_VARIABLE_VALUES); var perspective = new _cssutilities.Perspective(localAPI,

High

Ai Review Evidence

The entry point registers Tailwind CSS utilities, theme values, and animations.

index.jsView on unpkg · L26

72transitionProperty: { transform: safeLegacy ? 'transform' : 'perspective, translate, scale, transform, perspective, rotate' }, // New CSS keyframes and animations keyframes: function(pluginUtilities) { return _object_spread._({}, spin.keyframes(), bounce.keyframes(pluginUtilities), bounceAndSpin.keyframes(pluginUtilities)); }, animation: function(pluginUtilities) { return _object_spread._({}, spin.animation(pluginUtilities), bounce

High

Ai Review Evidence

The entry point registers Tailwind CSS utilities, theme values, and animations.

index.jsView on unpkg · L72