The remote-claude-daemon npm package connects to a hardcoded WebSocket relay controlled by the author, which accepts inbound messages treated as commands executed on the local host. It spawns a local binary with disabled permission prompts, allowing remote arbitrary code execution. Additionally, it enables remote control of mouse, keyboard, and clipboard input, and streams screen and microphone audio to the relay. This creates a comprehensive remote control and surveillance capability for the relay operator or anyone who can intercept or access the session token.