npm advisory reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-7202 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7201 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7200 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7205 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7215 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7212 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7214 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7213 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7209 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7205 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7215 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7212 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7214 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7213 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7209 blocks this version.

OpenSSF/OSV malware advisory MAL-2026-7026 blocks this version. The npm package tailwind-core versions 4.3.1 and 4.3.2 contain remote code execution payloads hidden in the exported Tailwi...

OpenSSF/OSV malware advisory MAL-2026-7026 blocks this version. The npm package tailwind-core versions 4.3.1 and 4.3.2 contain remote code execution payloads hidden in the exported Tailwi...

OpenSSF/OSV malware advisory MAL-2026-7026 blocks this version. The npm package tailwind-core versions 4.3.1 and 4.3.2 contain remote code execution payloads hidden in the exported Tailwi...

OpenSSF/OSV malware advisory MAL-2026-5750 blocks this version. The package advertises itself as an email-confirmation utility, but index.js contains only no-op stubs that console.log dem...