The npm package 'checkout-dolyame-logic' version 35.7.5 contains malicious code that downloads and executes an opaque native binary from anonymous Cloudflare Workers hosts. The package uses obfuscated string assembly and DNS TXT-record fallbacks to evade detection. The downloaded binary is saved to temporary directories with disguised filenames and executed detached from the main process. This behavior is unrelated to the package's stated purpose as a log/checkout helper. No official patch or remediation guidance is currently available.