Researchers analyzed VoidLink, a Linux-based malware framework that persists across AWS, Azure, Google Cloud, Alibaba, and Tencent. The code shows clear signs of AI-assisted development—leftover debug logs and structured phase labels. First major malware framework with evidence of LLM generation.