The aiassistcore package version 0.1.2 on PyPI contains malicious code as part of a campaign involving multiple packages. This code includes functionality to replace cryptocurrency wallet addresses with attacker-controlled ones, exfiltrate browser data, install malicious browser extensions, and establish remote control over the victim's device. The campaign is linked to North Korea's "Contagious Interview" threat actor group and involves keylogging, clipboard modification, persistence, and remote command execution. The malicious code is embedded in dependencies and used in malicious interview assessments or cryptocurrency projects.