The @cliphijack/santaclaude npm package contains malicious code that establishes a persistent WebSocket connection to a remote server, allowing that server to execute arbitrary shell commands within the user's tmux sessions. The package also supports remote-controlled updates by re-executing versions specified by the server, and it sends host identifiers back to the server via shell hooks. This design effectively grants unauthenticated remote control over the host environment where the package is installed.