tailwindcss-ratio-styles@0.3.2

Analysis

tailwindcss-ratio-styles@0.3.2 is a trojanized clone of the legitimate tailwindcss-aspect-ratio plugin. Its main entry point src/index.js appends a remote-code downloader to the genuine plugin code: on module load it fetches hxxp://23[.]27[.]245[.]100/index[.]js over plain HTTP, writes the response to ./inout.js in the current directory, and executes it via require(). This runs arbitrary remote code on any project that imports the package. C2/download host: 23[.]27[.]245[.]100 (port 80), path /index.js.