{"id":"MAL-2026-14132","title":"Malicious code in deepface-weights (PyPI)","summary":"Malicious code in deepface-weights (PyPI)","severity":"none","vendor":"deepface-weights","product":"deepface-weights","ecosystem":"pip","affected":["deepface-weights"],"published":"2026-08-18","updated":"2026-08-19","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/MAL-2026-14132","references":[{"url":"https://bad-packages.kam193.eu/pypi/package/deepface-weights"},{"url":"https://pypi.org/project/deepface-weights/0.1.0/"}],"tags":["osv","pip"],"ingestedAt":"2026-08-19T19:22:20.001Z","slug":"MAL-2026-14132","body":"## Overview\n\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (9c1cf8a0f273b75a4cf2b66c9b9fc351023b9f77d61e82c74d74534424ce0558)\nOn import, deepface_weights starts a daemon thread that polls every 10 seconds for the file `data/telethon_market_userbot.session` in the current working directory. When found, it POSTs the session file together with the local `os.getlogin()` value to the hardcoded endpoint https://webhook.site/730d2d03-5c78-4e0a-88df-9d8466b7e8aa. A Telethon `.session` file holds authenticated Telegram credentials, so exfiltration enables full takeover of the associated Telegram account. Package metadata is placeholder (author email `rozuvu@example.com`, description `Minimal example Python package`) and the name resembles the unrelated `deepface` face-recognition library, but the package ships none of that functionality — the stealer is its only behavior. Source comments in Russian label the destination as the attacker's server.\n\n## Source: kam193 (a9b6a1255b998e6497198b80ffff88e0612a2d839c6f1b9859664436f96e5fce)\nDuring import, package exfiltrates the sensitive file with the Telegram session token.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-08-deepface-weights\n\n\nReasons (based on the campaign):\n\n\n - files-exfiltration\n\n\n - target:telegram\n\n\n## Affected packages\n\n- `deepface-weights`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}