The tailwind-animates package distributed via npm has been identified as containing malicious code. Installation or execution of this package results in a full system compromise, potentially allowing an attacker to control the affected computer. Due to the severity of the compromise, all credentials and secrets stored on the system must be considered exposed and rotated from a secure environment. The malicious code may persist beyond removal of the package, indicating that the attacker could have installed additional backdoors or malware.

Full compromise of any computer with the tailwind-animates package installed or running. Exposure of all stored secrets and keys on the system. Potential persistent malicious presence even after package removal.

Remove the tailwind-animates package immediately. Rotate all secrets and keys stored on the affected computer from a separate, trusted machine. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious software.