@ai_/autoprefixers@1.2.0

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Any import/require of `lib/autoprefixer.js`, including `autoprefixer --info`.

Remote operator can execute arbitrary commands with the consuming process's permissions.

Remote encrypted command retrieval, AES decryption, and shell execution.

On module load, `lib/autoprefixer.js` decodes and requires `node:child_process`, then contacts two Base64-obscured HTTP endpoints. It combines returned values and calls `prefixInfo`; `lib/utils.js` decrypts the supplied ciphertext using AES-256-CBC. The resulting plaintext is passed to the decoded `exec` method, allowing the remote service to determine a command executed by the local Node process.

This is a concrete import-time remote command execution chain, not a package-aligned CSS-processing feature. Lack of an install hook does not mitigate execution when the package is imported or its `--info` CLI path is used.