AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns

AI-powered Villager, a penetration testing tool linked to a China-based company, has attracted nearly 11,000 downloads on PyPI, raising concerns it could be repurposed by cybercriminals for malicious use.

The framework, dubbed Villager, is assessed to be the work of Cyberspike and was first uploaded to PyPI in late July 2025 by a user named stupidfish001, a former capture the flag player for the Chinese HSCSEC team[.]Snapshots of the domain reveal it is marketed as a network attack simulation and post-penetration test tool to help organisations evaluate and strengthen their cybersecurity posture.

The tool appears to incorporate plugins that are components of a remote access tool, enabling invasive surveillance and control, with similarities noted to AsyncRAT. According to Straiker researchers Dan Regalado and Amanda Rousseau, published in a report shared with The Hacker News, the rapid public availability and automation capabilities create a realistic risk that Villager could follow the Cobalt Strike trajectory. Cyberspike’s emergence, first noted in November 2023, and its domain registrations have prompted questions about the company behind the tool.