The @whalent/agent-core npm package contains malicious code that establishes a WebSocket connection to a hardcoded remote gateway, enabling the operator to execute arbitrary commands on any host running the package. The package supports remote code updates from the same gateway without visible version or signature verification. It also exfiltrates AI-provider session identifiers and API keys to the attacker-controlled host. The code is heavily obfuscated to evade casual inspection. This affects specific versions of the package and no official patch or fix is currently documented.