Malicious Code Injection in animatecss-tailwind-binary: A Tailwind CSS Plugin Vulnerability
Summary
MAL-2026-18068: Malicious code in animatecss-tailwind-binary (npm). Affects animatecss-tailwind-binary versions 2.0.6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
animatecss-tailwind-binary is a Tailwind CSS plugin designed to integrate Animate.css animations into Tailwind projects. It allows developers to easily apply animations to their web applications using Tailwind's utility-first approach. However, this package has been compromised, leading to potential security risks for users who integrate it into their projects.
Vulnerability Detail
The vulnerability originates from the package version 2.0.6, which is linked to a malicious campaign. The plugin requires a private scoped package, @jasperquinn/postcss-motion-helpers, which is not publicly accessible. This private dependency contains malicious code that executes when the Tailwind configuration file is loaded. As a result, users who install this plugin may unknowingly run harmful code, compromising their applications and potentially exposing sensitive data.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall animatecss-tailwind-binaryIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the animatecss-tailwind-binary package until a secure version is released. Alternatively, consider using other animation libraries or plugins that do not have known vulnerabilities.
Conclusion
The animatecss-tailwind-binary package has been compromised, posing a significant risk to users who integrate it into their projects. It is crucial to update to a patched version or find alternative solutions to mitigate potential security threats. Regular monitoring of dependencies using tools like Vulert can help maintain application security.
See every vulnerability recorded for animatecss-tailwind-binary →
FAQ
animatecss-tailwind-binary is a Tailwind CSS plugin that allows developers to easily integrate Animate.css animations into their projects.
The vulnerability allows malicious code to execute within your application, which could lead to data breaches or other security issues.
You should immediately update the package to the latest patched version or remove it from your project until a secure version is available.
You can use Vulert, which monitors your package-lock.json file for vulnerabilities in real-time. Visit https://vulert.com to learn more.
Yes, you can use the Vulert playground at Vulert Scanner to check for vulnerabilities in your application without requiring any signup.
