Seven malicious packages posing as AI developer tools have been used to distribute a Windows remote-access trojan (RAT).