Material Tailwind spoofed by malicious NPM package

ReversingLabs researchers discovered that legitimate CSS-based software library Material Tailwind has been impersonated by a malicious NPM package, indicating continued malware distribution efforts in open source software repositories, The Hacker News reports.

devops malicious malicious npm malware npm npm package package spoofed