Open-source atomic malware analysis

Analyze another

tailwindcss 4.1.18

UNKNOWN
Verdict: BENIGN
SHA256: d7a3cfafbcf7fff0725d7170b5e94264cd5ad516dc2f7d3af14ed363c2cffa9c
“A utility-first CSS framework for rapidly building custom user interfaces.”
Mal-ecule
H₄(CmDb₅PoU)Md₂(Pa₃)
Size 177.2 KB download
First seen 25 days ago
Analyzed 7 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Micro-behaviors

notable severity, 75% confident.
communications/http/url Contains a hardcoded remote HTTP(S) URL
notable severity, 90% confident.
data/encode Builds characters with String.fromCharCode
notable severity, 90% confident.
data/format JavaScript locale-aware formatting call
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable

Metadata

notable severity, 88% confident.
file Multiple source lines exceed 1000 characters
notable severity, 90% confident.
package/manifest npm package is configured for public publishing
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 90% confident.
package/dependencies npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality package.json defines a package name
component severity, 90% confident.
build JavaScript file under a distribution directory
component severity, 100% confident.
file/extension JavaScript source filename extension

20 of 22 traits shown

Identity

SHA-256 d7a3cfafbcf7fff0725d7170b5e94264cd5ad516dc2f7d3af14ed363c2cffa9c
Canonical SHA-256 0a7d44b87226bb163dca297e9cc751e5764643c04343ea2655945ac24e0be9cf
Filename [email protected]
Package tailwindcss
Version 4.1.18
PURL pkg:npm/[email protected]

Origin

Source x
Feed aur.archlinux.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.1.18.tgz

Timeline

First seen 2 Aug 2026 23:28 UTC
First analyzed 2 Aug 2026 23:29 UTC
Last analyzed 21 Aug 2026 03:25 UTC
Last updated 21 Aug 2026 03:26 UTC

Labeling

Label unknown
Traits version ec9ce