tailwindcss-setfavicon

MAL-2025-190565

npmmalware11/18/2025
Description

Malicious code in tailwindcss-setfavicon (npm)

Indicators of Compromise
SHA256 Hashes (2)
2b37a431a1a2ea327f33d05d45886bdccfe78d01e0eee90010fd4b480f764545
91fc0eceb962b96f45fa2c5b85fe82bd7dd8a56b13ee4fe7e460091b7650af6f
References (1)
https://github.com/advisories/GHSA-8jr3-598q-gcm6OSV
Details
Ecosystemnpm
Attack Typemalware
Published11/18/2025
Aliases
GHSA-8jr3-598q-gcm6
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001