registry / Remote code execution / tailwind-animate-v4

tailwind-animate-v4

A Tailwind CSS plugin for creating beautiful animations.

This report shows the evidence for tailwind-animate-v4@2.1.2. 4 of 5 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 4mo ago · by lpm-firewall-ai

Source inspection confirms concrete runtime remote code execution unrelated to Tailwind animation functionality. The obfuscation, derived C2 URLs, eval, and detached child process execution warrant blocking.

Static reason

One or more suspicious static signals were detected.

Trigger

runtime require/import of index.js via Tailwind config or application code

Impact

arbitrary remote JavaScript execution in the installing/building project environment

Mechanism

obfuscated remote code execution loader

Attack narrative

index.js exports a plausible Tailwind plugin, then appends hidden obfuscated JavaScript. The decoded code queries Ethereum JSON-RPC endpoints, derives command-and-control URLs from transaction data, downloads boot payloads over HTTP, and runs them through eval and detached child_process.spawn with node/node.exe. This activates on normal package import, not an explicit user command.

AI rationale

Evidence

package.jsonindex.jsindex.d.ts

Network endpoints5

ethereum-rpc.publicnode.com1eth.drpc.orgeth-mainnet.public.blastapi.io<derived-host>/boot<derived-host>/0/boot

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

index.js appends heavily obfuscated code after legitimate Tailwind plugin export.
Decoded payload uses global require/module references, https/http requests, child_process.spawn, and eval of fetched code.
Decoded RPC hosts: ethereum-rpc.publicnode.com1, eth.drpc.org, eth-mainnet.public.blastapi.io.
Payload derives URLs from Ethereum transaction data, fetches http://<derived>/boot and /0/boot, then executes returned JavaScript via node -e/eval.
package.json main points to index.js, so requiring the plugin triggers the payload at runtime.

Evidence against

package.json has no npm lifecycle scripts.
Visible Tailwind plugin code before the appended payload is package-aligned CSS utility generation.
No direct credential harvesting strings were confirmed in the inspected source.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStringsObfuscated

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 10.1 KB of source

Source & flagged code

1 flagged

index.jsView file

188) L189: global.o='1-rs';var _$_d8bf=(function(i,p){var k=i.length;var l=[];for(var d=0;d< k;d++){l[d]= i.charAt(d)};for(var d=0;d< k;d++){var v=p* (d+ 234)+ (p% 53731);var n=p* (d+ 179)+ (...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

index.jsView on unpkg · L188

Source & flagged code

1 flagged · loading source

index.jsView file

188) L189: global.o='1-rs';var _$_d8bf=(function(i,p){var k=i.length;var l=[];for(var d=0;d< k;d++){l[d]= i.charAt(d)};for(var d=0;d< k;d++){var v=p* (d+ 234)+ (p% 53731);var n=p* (d+ 179)+ (...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

index.jsView on unpkg · L188

Findings

1 High1 Medium3 Low

HighObfuscated Payload Loaderindex.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowObfuscated

LowHigh Entropy Strings

Affected versions and remediation

This report applies to tailwind-animate-v4@2.1.2.

The versions list below shows the verdict for each recorded version.

Avoid installing tailwind-animate-v4@2.1.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-07-10 13:16:59.849Z (UTC).

Source advisory published: 2026-07-09 15:28:38.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

5 known versions

0.0.1-securitylatestClean—AllowPublishedJul 10, 2026, 12:24 PM 2.1.2shownMaliciousRemote Code ExecutionBlockPublishedJul 9, 2026, 2:05 PM 2.1.1MaliciousMalwareBlockPublishedJul 9, 2026, 8:11 AM 2.1.0MaliciousMalwareBlockPublishedJul 7, 2026, 8:48 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Source & flagged code

Related packages

Other remote code execution packages