security holding package
Do not install. Package is flagged as malicious (advisory MAL-2026-315).
| Severity | ID | Summary | Fixed in |
|---|---|---|---|
| critical | GHSA-53q4-wj32-3vv9 | Malicious code in tailwind-merge-v2 (npm) | — |
MAL-2026-315 — Malicious code in tailwind-merge-v2 (npm)Get this data programmatically — free, no authentication.
curl https://depscope.dev/api/check/npm/tailwind-merge-v2First published · 2026-01-16T16:41:15.700Z
Last updated · 2026-01-16T16:41:15.841Z