The tailwindcss-effector npm package version 1.7.0 contains malicious code that executes attacker-controlled JavaScript fetched from blockchain RPC endpoints. This code runs an obfuscated payload via eval and spawns a detached child process, resulting in full remote code execution on the host machine. The package is a typosquatting attempt masquerading as a legitimate TailwindCSS plugin. Any system with this package installed should be considered fully compromised.