The @addai/node npm package contains malicious code that installs a background daemon on the host system. This daemon connects to a hardcoded remote Supabase backend to receive commands that allow remote execution of AI-agent CLI tools with arbitrary prompts, directories, and elevated permissions. It also enables remote installation and updating of npm packages, persistence via autostart, and exfiltrates credentials from various third-party AI CLI tools. This behavior creates a remote access channel controlled by an attacker, compromising the host's security.