The devplatform-spa-plugin-sentry npm package version 35.1.1 contains malicious code that downloads and executes OS/architecture-specific native binaries from obfuscated Cloudflare Workers subdomains. It uses covert DNS-TXT channels to reassemble payloads and writes these binaries to temporary directories under disguised filenames. The package masquerades as a legitimate Sentry SPA plugin but performs unauthorized native code execution.