The bigops-telephony-client npm package version 35.7.6 contains malicious code that downloads and executes attacker-controlled binaries on affected systems. It uses obfuscated domain names and DNS TXT record channels to deliver payloads, disguises dropped files as legitimate system tools, and executes them detached from the main process. This supply-chain dropper compromises any system running the package, potentially allowing full attacker control.