@ai_/autoprefixers@1.0.0

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Importing `@ai_/autoprefixers` main entrypoint; `bin/autoprefixer --info` also imports it.

Arbitrary command execution under the consuming process's privileges.

Remote encrypted payload retrieval and `child_process.exec` execution.

At import time, the package decodes and loads `node:child_process`, fetches a key and encrypted payload from hidden remote HTTP endpoints, decrypts the payload with AES-CBC, and executes the resulting command silently. The external helper import is undeclared and may break some installations, but the embedded behavior is a concrete remote-command-execution chain.

The package contains import-time, obfuscated remote payload execution unrelated to CSS prefixing. Lack of an install hook does not mitigate arbitrary shell execution when the package is imported.