China-Linked AI Pentest Tool ‘Villager’ Raises Concern After 10K Downloads

A newly published PyPI package named "Villager", attributed to a China-linked group (Cyberspike), is an AI-orchestrated red-team framework that automates reconnaissance, exploitation and follow-on tasks via natural-language commands; it integrates AsyncRAT-like remote-administration/infostealer capabilities, uses containerised ephemeral execution for forensic evasion, and has been downloaded over 10,000 times — researchers warn it could be repurposed by malicious actors.