The npm package tailwind-animatecss-kit version 2.0.6 is associated with a malicious campaign involving fake job interviews. It includes a private scoped dependency that requires an npm token to resolve, enabling code execution when the plugin is loaded in tailwind.config.js and the development server starts. The public tarball itself contains no install scripts or network code, and no direct harmful code paths were identified in the shipped contents. Multiple similar packages were published under various accounts during mid-2026.
The npm package tailwind-animaflow-kit version 2.0.6 is associated with a malicious campaign involving fake job interview lures. The package itself contains no install scripts or network code, but it requires a private scoped dependency that is inaccessible publicly and delivers the malicious payload when the plugin is loaded in tailwind.config.js. Multiple similar packages were published under different accounts over a short period in 2026.
The npm package animatecss-tailwind-luminary versions 2.0.6 and 2.0.7 is associated with a malicious campaign involving multiple fake packages. The package itself contains no harmful install-time or import-time behavior, no lifecycle scripts, and no network calls. However, it depends on a private scoped package that is not publicly accessible and requires an npm token, which could deliver malicious code when the plugin is loaded in a development environment. This campaign includes multiple packages published under various accounts over a period of months.
The npm package animatecss-tailwind-graphic version 2.0.6 is linked to a malicious campaign involving fake job interviews. It depends on a private scoped package that is not publicly accessible and requires an npm token found in a lure repository, enabling execution of hidden code when the plugin is loaded in Tailwind CSS. The public tarball itself contains no install scripts or network code, and no direct harmful behavior was observed in the shipped package contents. Multiple similar packages were published under various accounts over a period of months.
The npm package animatecss-tailwind-binary version 2.0.6 is part of a malicious campaign involving fake job interview lures. The package itself contains no install scripts or network code, but it depends on a private scoped package that requires an npm token to access. This private dependency, which was not retrieved during analysis, contains the malicious payload that executes when the Tailwind CSS plugin loads during development server startup. Multiple related malicious packages were published under various accounts over a period from July to October 2026.
The animate-twcss-pack version 2.0.6 is a Tailwind CSS plugin linked to a fake job interview campaign involving malicious packages. It depends on a private scoped package that is not publicly accessible, which could deliver malicious code when the plugin is loaded. However, analysis found no evidence of harmful behavior such as exfiltration, credential theft, or remote code execution in the publicly available package.
The npm package animate-twcss-bridge version 2.0.6 is identified as malicious and linked to a fake job interview campaign. It depends on a private scoped package that requires an npm token to resolve, which can execute code when the Tailwind CSS plugin loads. The publicly available tarball does not contain install scripts or network code, and the malicious payload resides in the private dependency. Multiple related malicious packages were published under various accounts over a period of months. No direct lifecycle script execution or network communication is present in the shipped contents.
The animate-tailwind-kit npm package versions 3.0.1 and 3.0.4 are linked to a malicious campaign involving a private dependency that delivers malicious code when the plugin is loaded in Tailwind CSS configurations. The public package itself contains no installer scripts or network code, but it requires a private scoped package that is not publicly accessible and relies on an npm token committed in a lure repository. This private dependency executes code during development server startup. Multiple related malicious packages were published over several months under various accounts.
The npm package tailwind-fabric versions 3.0.1 and 3.0.4 is associated with a malicious campaign involving a private dependency that executes code when the plugin is loaded. The payload resides in a private scoped package that requires an npm token to access, preventing direct retrieval from the public registry. The publicly published tarball contains no install scripts or network code, and no direct malicious behavior was observed in the examined package code paths. Multiple related packages were published under various accounts over a period of months.
The npm package signalledger-diagnostics version 2.0.6 is identified as part of a malicious campaign involving fake job interview lures. The package is a Tailwind CSS plugin that depends on a private scoped package requiring an npm token, which delivers the actual malicious payload when the plugin is loaded during development. The publicly available tarball does not contain install scripts or network code, and no direct malicious behavior was observed in the shipped files. Multiple similar packages were published under various accounts over a period of months.
The signalledger-bridge npm package version 2.0.6 is associated with a malicious campaign involving fake job interview lures. The package itself contains no install scripts or network code, but it depends on a private scoped package that delivers the malicious payload when the plugin is loaded in Tailwind CSS. The private dependency is not publicly accessible and requires an npm token, which was exposed in the lure repository. Multiple related malicious packages were published over several months under different accounts.
The animatecss-tailwind-vectrix npm package versions 2.0.6 and 2.0.7 are part of a malicious campaign involving fake job interview lures. The package depends on a private scoped package that requires an npm token to access, which can execute code when the Tailwind CSS plugin loads during development server startup. The public tarball itself contains no install scripts or network code, and the private dependency was not retrieved for analysis. Multiple related malicious packages were published under various accounts between July and October 2026.
The animatecss-tailwind-presets npm package versions 1.0.0 and 2.0.3 are linked to a malicious campaign involving a private dependency that delivers malicious code when the plugin is loaded in Tailwind CSS configurations. The public package itself contains no direct installer-facing malicious behavior, but it requires a private scoped package that is not publicly accessible and contains the actual payload. Multiple related packages were published under different accounts over a period of several months.
The animatecss-tailwind-plugin version 2.0.6 is a malicious Tailwind CSS plugin linked to a fake job interview campaign. It includes a private scoped dependency that requires an npm token to access, which delivers malicious code executed when the plugin loads in tailwind.config.js and the development server starts. The published package itself contains no install scripts or network code, and the malicious payload resides in the private dependency. Multiple similar malicious packages were published under various accounts over a recent period.
The animatecss-tailwind-helper package version 2.0.6 is part of a malicious campaign involving fake job interview lures. It is a Tailwind CSS plugin that depends on a private scoped package only accessible with a committed npm token, which delivers malicious code when the plugin is loaded. The public tarball itself contains no install scripts or network code, and the payload resides in the private dependency. Multiple similar malicious packages were published under various accounts over a period of months. The shipped files do not include installer secrets, network communication, or persistence mechanisms.
The npm package @pkgship/frpc-linux-arm64 version 0.71.0 contains malicious code. It is a platform-specific distribution that installs a prebuilt native binary for Linux ARM64 systems. Although the package does not execute code during installation or perform network callbacks, its presence indicates a full compromise of the affected system. Any computer with this package installed should be considered fully compromised, and all secrets and keys on that system should be rotated immediately. Removal of the package alone may not eliminate all malicious software introduced.
The npm package 'rootaccessxvv-bbmarker' version 1.0.2 contains malicious code that executes during installation. It runs a postinstall script that collects host identifiers and system information, then exfiltrates this data to an attacker-controlled webhook URL. This behavior constitutes a supply-chain attack by automatically sending sensitive metadata without user consent.
The leakdeep package on PyPI masquerades as an OSINT and credential-leak intelligence tool but contains malicious code that acts as an infostealer on Windows systems. When executed, it starts a background process that steals browser credentials, cookies, autofill data, Discord authentication tokens, clipboard contents, screenshots, and webcam frames. The stolen data is exfiltrated to a hardcoded Discord webhook URL, which is obfuscated and reconstructed at runtime. The advertised search functionality is non-functional, serving as a cover for the malicious activities.
The PyPI package 'tonemaptts' version 0.1.0 is part of a malicious campaign that falsely advertises itself as an audio-analysis profiles loader but actually downloads and executes remote malicious code. This package is linked to a broader coin-mining campaign and is designed to run unauthorized scripts from remote sources.
The pyrechoasr package on PyPI is a malicious package falsely advertising as an audio-analysis profiles loader. Its actual purpose is to download and execute remote malicious scripts, continuing a known coin-mining campaign. The package version 0.1.0 is affected. No CVSS score is available for this threat.