The npm package beaver-ui-table version 35.2.7 contains malicious code that downloads and executes a native binary from obfuscated Cloudflare Worker domains and a DNS-TXT fallback. This binary is saved under disguised filenames in temporary directories, given execute permissions, and run detached in the background. The package includes obfuscation techniques such as dynamic hostname assembly, covert DNS fallback, and anonymous hosting. Any system with this package installed should be considered fully compromised, and secrets or keys stored on it should be rotated immediately.