MAL-2025-191595

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/tailwindcss-forms/MAL-2025-191595.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-191595
Aliases
  • SNYK-JS-TAILWINDCSSFORMS-14152334
Published
2025-12-01T13:26:48Z
Modified
2026-03-19T12:48:37.334507Z
Summary
Malicious code in tailwindcss-forms (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (65ee27d0caf9bfc7ff677eb3a3ab32742a19c31bc8418b532bbf925c6a5c385b)

The package tailwindcss-forms was found to contain malicious code.

Database specific 
{
    "malicious-packages-origins": [
        {
            "versions": [
                "1.0.3"
            ],
            "id": "RLMA-2025-05961",
            "modified_time": "2025-12-01T13:26:48Z",
            "import_time": "2025-12-02T09:09:55.110560222Z",
            "sha256": "e20a355d1779a03099a213f7f35e6272f19168d5fb06ddec939a81910f7c3f1f",
            "source": "reversing-labs"
        },
        {
            "versions": [
                "1.0.3"
            ],
            "import_time": "2025-12-02T21:35:53.345973552Z",
            "modified_time": "2025-12-02T21:11:00Z",
            "sha256": "65ee27d0caf9bfc7ff677eb3a3ab32742a19c31bc8418b532bbf925c6a5c385b",
            "source": "amazon-inspector"
        },
        {
            "id": "RLUA-2025-06511",
            "modified_time": "2025-12-23T08:32:21Z",
            "import_time": "2025-12-24T10:07:35.938600236Z",
            "sha256": "84175205fdc8baabb3d361c52f189b83818b8a766521a69423e6e8c7b2539459",
            "source": "reversing-labs"
        },
        {
            "id": "RLUA-2026-01607",
            "modified_time": "2026-03-18T13:11:42Z",
            "import_time": "2026-03-19T12:21:01.337055471Z",
            "sha256": "69c937a216545a949ab3f59ead6816480f08f8efdc8861dc27e7b9848dd78b02",
            "source": "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

npm / tailwindcss-forms

Package

Name
tailwindcss-forms
View open source insights on deps.dev
Purl
pkg:npm/tailwindcss-forms

Affected ranges

Affected versions

1.*
1.0.3

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/tailwindcss-forms/MAL-2025-191595.json"