The npm package @workoscalif/sudoku contains a malicious postinstall script that executes a large opaque Linux x64 binary disguised as a small C sudoku generator. The binary is a Go runtime executable with container and CI environment fingerprinting capabilities, inconsistent with the advertised functionality. The package scope mimics a known vendor, potentially misleading developers to install it unintentionally. This behavior indicates a malicious native binary dropper rather than a legitimate sudoku helper.