CERT24Malicious Package: 2026-09-aitextkit-pyLoading data…
CERT24Threat Observatory
Period

Malicious Package: 2026-09-aitextkit-py

The record describes a package containing malicious code or a dependency that contains malicious code. The package downloads and executes a remote script, which downloads and executes a heavily obfuscated final stage. It may also exfiltrate browser data, execute remote commands on the victim’s machine, and establish persistence, for example as the systemd service “anymeetly-cameradriver”.

← Back to intelligence

Malicious Package: 2026-09-aitextkit-py

The record describes a package containing malicious code or a dependency that contains malicious code. The package downloads and executes a remote script, which downloads and executes a heavily obfuscated final stage. It may also exfiltrate browser data, execute remote commands on the victim’s machine, and establish persistence, for example as the systemd service “anymeetly-cameradriver”.