The Python package aitextutils-py versions 0.1.0 and 0.1.1 contain malicious code or depend on a malicious package. This malicious code downloads and executes heavily obfuscated remote scripts, establishes persistence on the victim system as a systemd service named "anymeetly-cameradriver," and functions as an infostealer and remote access trojan (RAT). The package executes remote commands and exfiltrates browser data. The campaign associated with this threat is identified as 2026-09-aitextkit-py and is classified as critical due to its malicious intent and capabilities.