@ai_/[email protected] and related versions are malicious typosquat packages impersonating the legitimate 'autoprefixer' npm package. Upon require/import, the package base64-decodes the string 'node:child_process' to dynamically load the child_process module. It then fetches two responses over unencrypted HTTP from attacker-controlled URLs, combines them, and executes the resulting command via child_process.exec with silent:true. The use of base64 encoding obfuscates the require target, the exec sink, and the destination host to evade casual detection. This behavior results in arbitrary remote code execution on any system that installs and runs this package.

Any project that installs and requires @ai_/autoprefixers versions 1.0.0, 1.1.0, or 1.2.0 will execute attacker-supplied shell commands fetched at runtime from attacker-controlled endpoints. This can lead to full remote code execution, compromising the host environment and potentially allowing further malicious activities such as data theft, system manipulation, or persistence.

Users should immediately remove any instances of @ai_/autoprefixers from their projects and replace them with the legitimate 'autoprefixer' package. Avoid installing packages from untrusted or unknown namespaces. Since no official patch or fix is available for this malicious package, remediation involves removing the package and auditing systems for any signs of compromise caused by its execution.