The npm package @ikbal_fadilah_vanexa01/vanexa-agent contains malicious code that enables remote command execution on the host machine. The package runs an agent daemon that accepts commands from a remote phone app and executes them locally via child processes, including PowerShell and inline script evaluation. Instead of using the documented LAN-only WebSocket communication, it hardcodes two Cloudflare Workers endpoints controlled by a third party unrelated to the npm publisher. The agent's main runtime is shipped as V8 bytecode, reducing auditability and hiding the malicious network relay. This design effectively grants the relay operator full remote control over the installer's system.