better-tailwindcss@4.6.3

Analysis

better-tailwindcss is a combosquat (tailwindcss with "better-" prefix) that contains no Tailwind CSS functionality. The package declares a self-referencing dependency from an external HTTP server at hxxp://pack[.]nppacks[.]com/npm/better-tailwindcss in both dependencies and devDependencies. When npm install resolves this dependency, it fetches a tarball from the attacker-controlled host, enabling arbitrary remote code delivery transparently during installation. Dependencies include axios, node-fetch, and ws (networking libraries). No repository URL is declared.