MAL-2025-191595

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/tailwindcss-forms/MAL-2025-191595.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-191595
Published
2025-12-01T13:26:48Z
Modified
2025-12-24T10:30:56.946189Z
Summary
Malicious code in tailwindcss-forms (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (65ee27d0caf9bfc7ff677eb3a3ab32742a19c31bc8418b532bbf925c6a5c385b)

The package tailwindcss-forms was found to contain malicious code.

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2025-12-02T09:09:55.110560222Z",
            "modified_time": "2025-12-01T13:26:48Z",
            "source": "reversing-labs",
            "sha256": "e20a355d1779a03099a213f7f35e6272f19168d5fb06ddec939a81910f7c3f1f",
            "id": "RLMA-2025-05961",
            "versions": [
                "1.0.3"
            ]
        },
        {
            "import_time": "2025-12-02T21:35:53.345973552Z",
            "modified_time": "2025-12-02T21:11:00Z",
            "source": "amazon-inspector",
            "sha256": "65ee27d0caf9bfc7ff677eb3a3ab32742a19c31bc8418b532bbf925c6a5c385b",
            "versions": [
                "1.0.3"
            ]
        },
        {
            "import_time": "2025-12-24T10:07:35.938600236Z",
            "modified_time": "2025-12-23T08:32:21Z",
            "source": "reversing-labs",
            "sha256": "84175205fdc8baabb3d361c52f189b83818b8a766521a69423e6e8c7b2539459",
            "id": "RLUA-2025-06511"
        }
    ]
}
References
Credits

Affected packages

npm / tailwindcss-forms

Package

Name
tailwindcss-forms
View open source insights on deps.dev
Purl
pkg:npm/tailwindcss-forms

Affected ranges

Affected versions

1.*
1.0.3

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/tailwindcss-forms/MAL-2025-191595.json"