Actually, it's udevd itself doing that. A regular child-killing rampage is built into its main loop. To avoid it, one must arrange to not run the desired program directly, but rather to make udevd activate another service that in turn runs the desired program.
systemd kills the entire udev process tree (all children) including the ripping script after 30 seconds.