Coinbase "skill" installs a server, keeps it running hidden in the background

Similar:

Top downloaded skill in ClawHub contains malware

https://news.ycombinator.com/item?id=46898615