Cybersecurity researchers have identified 14 trojanized npm packages disguised as legitimate utilities that are designed to deliver an AI-powered Linux implant named RedC2 4.0. When loaded, the malicious module executes a bundled binary as a detached background process. This incident underscores the risks associated with open-source package repositories and the increasing sophistication of malware leveraging AI.