Malicious npm Package Poses as Tailwind Tool

Posted on by

Branded as a components library for two popular open source resources, Material Tailwind instead loads a Windows .exe that can run PowerShell scripts.

from Dark Reading https://ift.tt/GrSZT8z
via IFTTT