delivery-ci-sage@35.6.3

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Any require/import of delivery-ci-sage, including normal application startup.

Arbitrary attacker-controlled native code executes with the importing process's permissions.

Remote payload download/DNS reconstruction, temporary executable drop, and detached shell spawn.

The public entrypoint catches and hides an unconditional import of _loader.js. That loader selects a platform-specific endpoint, downloads an opaque payload from rotating hosts or reconstructs it from DNS TXT records, writes it to a temporary location, marks it executable on Unix, and launches it detached through a shell. The TTL marker limits repeated execution rather than providing a legitimate package function.

The package's advertised API is a trivial object, while its import path silently performs a concealed remote-binary execution chain. No lifecycle hook is needed because ordinary package import is sufficient to trigger it.