I found a malware hiding in my tailwindcss config file.

• 12 min readJun 21, 2026--I almost closed the file without reading it.
• Three days later I was killing processes in production at 2am, rotating every credential I own, and staring at a git commit with my name on it that I never made.
• If you’ve got an active Node project, you’ll probably want to check it before you finish reading this.