The npm package 'finance-business-company-id-models' version 20.1.5 contains malicious code that downloads and executes platform-specific binaries from obfuscated external hosts. The package disguises its network activity and filenames, executes binaries without verification, and includes multiple droppers that spawn detached processes. This behavior is unrelated to the package's stated purpose and indicates a supply-chain compromise. Any system with this package installed should be considered fully compromised, and all secrets and keys on that system should be rotated immediately.