Malicious code in agentaix (PyPI)

The agentaix PyPI package versions 0.1.0 and 0.2.0 include malicious code that installs a persistent autorun job on the victim system. This persistence mechanism allows attackers to exfiltrate files and execute remote commands, functioning as a remote access trojan (RAT). The campaign associated with this package is identified as 2026-10-agentaix and is characterized by clear malicious intent, including file exfiltration and remote code execution capabilities. No CVSS score or vendor advisory is available, and no patch or fix has been indicated.

The malicious package enables attackers to maintain persistence on infected machines, exfiltrate sensitive files, and execute remote commands, potentially compromising confidentiality, integrity, and availability of the victim system. This poses a significant security risk to users who install these specific versions of the agentaix package.

No patch or official remediation is currently available. Users should immediately uninstall the agentaix package versions 0.1.0 and 0.2.0 if installed. Avoid installing or using this package from PyPI. Monitor systems for unauthorized persistent jobs and suspicious network activity related to file exfiltration or remote command execution.