The npm package claims-microgen-templates version 35.7.1 contains malicious code that loads a platform-specific binary from obfuscated Cloudflare Workers hosts and fallback domains. The payload is saved to temporary directories with randomized filenames, made executable, and run detached via shell commands. This behavior is unrelated to the package's stated purpose and lacks any integrity verification or publisher validation.