The npm package sme-rko-finance-front-operations-tax version 35.8.1 contains malicious code that downloads and executes platform-specific native binaries from obfuscated and suspicious external hosts. These binaries are saved to temporary directories under disguised filenames and executed detached from the main process. The package's stated functionality does not justify this behavior, indicating malicious intent.