The npm package dolyame-ui-noindex version 35.8.1 is a malicious package that, upon being required, downloads and executes an unsigned platform-specific binary from suspicious remote hosts. The binary is saved in temporary directories under disguised filenames and executed detached from the parent process. The package uses obfuscation techniques and fallback DNS-TXT channels to retrieve payloads if HTTPS is blocked. Despite its name suggesting a legitimate UI library, it contains no UI functionality and solely performs this malicious code execution.