# MAL-2026-16130: Malicious code in aitextkit-py (PyPI)


- **Type:** Malicious package
- **Package:** `aitextkit-py` (PyPI)
- **Published:** 11 Sep 2026

## What is MAL-2026-16130?

MAL-2026-16130 is a malicious package in aitextkit-py, published on 11 Sep 2026. 

### Official description

The package presents itself as a small text-cleaning utility library, but both shipped implementation modules (text.py and system.py) consist of a single-line pyobfuscator.com loader of the form `_ = lambda __: __import__('zlib').decompress(__import__('base64').b64decode(__[::-1]));exec((_)(b'...'))`, which reverses, base64-decodes, zlib-decompresses, and exec()s an opaque blob at module import. __init__.py imports from.text, so `import aitextkit` runs the decoded bytes on the installer's Python interpreter. __init__.py also re-exports an undocumented `setup` symbol whose body lives inside the obfuscated blob and which is not mentioned in the README, tests, or public API documentation - a common stager entry-point shape. system.py, which backs the documented `get_os_version()` helper, uses the identical loader and its tests reference `platform`, `release`, and `arch` fields, so the decoded code at minimum performs host enumeration inside code that is not inspectable from source. The declared text-utility purpose has no legitimate need to ship its entire implementation as an exec-decoded blob; the loader shape matches that used by PyPI credential-stealer families.

The package hides code downloading script, which then downloads and executes a heavily obfuscated final stage. The remote stages are hosted on a domain presenting a suspicious-looking corporate website. The downloaded code establishes persistence e.g. as "anymeetly-cameradriver" systemd service. The discovered artifacts suggest strongly it acts as an infostealer and RAT.

---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-09-aitextkit-py

Reasons (based on the campaign):

 - obfuscation

 - Downloads and executes a remote malicious script.

 - persistence

 - infostealer

 - exfiltration-browser-data

 - rat

 - The package contains code to execute remote commands (probably limited to a specific set) on the victim's machine.

## What should I do about MAL-2026-16130?

Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.

## Fix prompt for AI coding agents

```text
MAL-2026-16130 is a malicious package: aitextkit-py (PyPI). Every version was published to cause harm.

Task:
1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.
2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.
3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.
4. If the package is not used anywhere, say so and change nothing.

Reference: https://insights.sbomify.com/MAL-2026-16130/ (Markdown: https://insights.sbomify.com/MAL-2026-16130/index.md)
```

## Sources

- OSV: https://osv.dev/vulnerability/MAL-2026-16130

---
From sbomify Insights: https://insights.sbomify.com/MAL-2026-16130/
Summaries are generated and may contain mistakes; the official description above is the record.