AI-powered penetration tool, an attacker's dream, downloaded 10K times in 2 months

Villager is an AI-driven penetration-testing tool published to PyPI and attributed to the China-linked organization Cyberspike; it has been downloaded roughly 10,000 times. The framework integrates malicious components (AsyncRAT, Mimikatz), auto-creates isolated Kali Linux containers for scanning and exploitation, uses a 4,201-entry AI prompt database to generate exploits, and includes features like 24-hour self-destruct to erase evidence — lowering the skill barrier for automated attacks and raising risk for rapid malicious adoption.