Malicious PyPI package: a fully-featured Remote Access Tool / backdoor published anonymously (author 'gcli contributors', no company, no author/maintainer email; homepage github.com/gcli-control/gcli returns 404; first published 2026-07-21, 0 downloads). It implements an AES-256-GCM encrypted command-and-control relay over npoint.io JSON bins (a free dead-drop service used to hide C2), advertises 200+ remote commands with full desktop/system control, and ships keylogging (keylog.py), webcam and audio capture (webcam.py/audio.py), browser credential/data theft, privilege-escalation helpers, and silent persistence via a cron watchdog (persistence.py installs a '* * * * * watchdog.sh' entry that relaunches a hidden 'gcli host' daemon with nohup). No consent or authorized-use mechanism. Confirmed malicious: remote-access trojan / spyware.