tailwind-extension-kit@1.3.2

Analysis

tailwind-extension-kit@1.3.2 is a combosquat of "tailwind" that executes remote code on require. Its main entry point index.js fetches hxxp://31[.]97[.]137[.]157:45000/icons/109 and runs the returned JSON field `credits` through the Function constructor with full Node.js globals injected (require, process, Buffer, global, setTimeout), giving the remote payload arbitrary code execution in the installer's environment. The fetch is wrapped in a retry loop that re-requests on failure. The package also declares unrelated dependencies (axios, express, better-sqlite3, socket[.]io-client, node-machine-id) inconsistent with its stated Tailwind-utilities purpose.