The npm package dolyame-ui-postcssconfig version 35.8.1 contains malicious code that downloads and executes platform-specific binaries from hardcoded Cloudflare Workers hostnames and fallback domains. This behavior is hidden behind obfuscated code and disguised as a legitimate postcss configuration package. The malicious binaries are saved to temporary directories, given executable permissions, and executed detached from the main process. The package's declared purpose does not match its actual behavior, indicating deliberate deception.