The npm package 'claw-subagent-service' installs a privileged Windows service that runs as LocalSystem without user consent. It establishes a persistent remote-control channel via a vendor-controlled IM backend, enabling arbitrary command execution and continuous data exfiltration from the host. The service self-updates silently every six hours, fetching and executing new versions with elevated privileges. This behavior creates a vendor-operated remote administration agent with persistent privileged access on affected machines.