Malicious code in tailwind-base-buttons (npm)
Affects tailwind-base-buttonsSource GCVE Database
Rated by Threat Radar
Data as of 10/25/2026, 07:53:01 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npmtailwind-base-buttons | Affected– | Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Remove the 'tailwind-base-buttons' package immediately from all affected systems. Rotate all secrets, keys, and credentials stored on the compromised machines from a different, secure computer. Because the attacker may have installed additional malicious software, consider rebuilding or thoroughly cleaning affected systems to ensure full remediation.
Description
The npm package 'tailwind-base-buttons' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removing the package alone does not guarantee removal of all malicious software, as full control of the computer may have been given to an attacker.
Impact
Any system with the 'tailwind-base-buttons' package installed or running is considered fully compromised. Attackers may have gained full control, risking exposure or theft of sensitive data, credentials, and keys. The integrity and confidentiality of the affected system cannot be assured without comprehensive remediation and credential rotation.
Summary
The 'tailwind-base-buttons' npm package has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host system. The attacker may gain complete control, potentially installing additional malicious software beyond the package itself. Due to the severity of the compromise, secrets and keys stored on the affected system must be rotated from a separate, secure environment. The package removal is necessary but insufficient to fully remediate the infection.