According to the researchers, versions of the malware are published almost every day. A widespread campaign in which attackers tronize hacker tools with the help of njRAT and use it for everything they think is worth it, i.e. carry out attacks or steal data. It is a very common case of the hacker world to infect tools.

https://cyware.com/news/njrat-trojanizes-hacking-tools-in-widespread-campaign-to-conduct-ddos-attacks-and-steal-sensitive-data-8584f353