claims-patch-url@35.3.9

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Any runtime require/import of the package entrypoint.

Unconsented remote code execution as the importing application's user.

remote payload download, temporary binary drop, and detached shell execution

Requiring index.js silently imports _compat.js. Its top-level run() downloads a platform-specific payload from obfuscated workers.dev hosts or reconstructs one from DNS TXT records, stores it under a temporary hidden/random filename, makes it executable on Unix, and launches it detached. The loader suppresses output and errors, leaving the remote operator in control of executed code.

This is a concrete, import-triggered remote-code-execution chain unrelated to the documented minimal SDK API. The absence of an install hook does not mitigate execution on normal package use.