The npm package tailwindcss-scrollbar-hide contains malicious code that executes an obfuscated payload upon import or require. This payload queries Ethereum public RPC endpoints and a blockchain explorer to retrieve attacker-controlled data, which it uses to dynamically fetch and execute further malicious code on the infected machine. The package masquerades as a zero-dependency CSS plugin but includes network communication, process spawning, and dynamic code execution with no legitimate purpose. Installing or running this package results in full system compromise, and secrets or keys on the affected machine should be considered exposed.