The npm package warp-drive-internal-tooling version 99.9.9 contains malicious code that executes a hidden PowerShell process during installation. This process downloads and runs an unverified binary named Verification_Tool.exe from an anonymous file hosting service, resulting in unattended execution of attacker-controlled code on Windows machines. The behavior is consistent with a dropper designed to conceal its activity.