The npm package dolyame-ui-overridestyles version 35.8.1 contains malicious code that downloads and executes platform-specific binaries from multiple obfuscated external hosts. The package disguises itself as a UI style override library but performs unauthorized binary drops and execution without integrity checks. This behavior includes writing executables to temporary directories, setting executable permissions, and spawning processes to run these binaries. The package uses obfuscation techniques to evade static detection and does not verify the authenticity of downloaded payloads.