The @addai/entity-runtime npm package contains malicious code that runs a daemon polling a hardcoded Supabase project for remote job instructions. This daemon spawns AI agent processes with parameters controlled by the remote party, allowing arbitrary shell command execution on the installer's machine without user interaction. It also disables safety prompts for bypassing permissions in a related AI tool, resulting in persistent host-level remote code execution and reduced safety controls.