The npm package @quukk/opencode-clawmessenger version 1.1.10 contains malicious code that establishes a remote-controlled bridge. After user setup, it authenticates to a remote server and connects to a messaging channel to receive commands that can start, stop, restart, or control local processes. The package obfuscates its code to hide its behavior, disables TLS verification when fetching sensitive credentials, and replaces a system binary with a wrapper to maintain control. This allows an attacker controlling the remote relay or messaging account to execute arbitrary commands on the user's machine after setup.