MAL-2026-14132None▾ SunlitMalicious code in deepface-weights (PyPI)
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
-= Per source details. Do not edit below this line.=-
On import, deepface_weights starts a daemon thread that polls every 10 seconds for the file data/telethon_market_userbot.session in the current working directory. When found, it POSTs the session file together with the local os.getlogin() value to the hardcoded endpoint https://webhook.site/730d2d03-5c78-4e0a-88df-9d8466b7e8aa. A Telethon .session file holds authenticated Telegram credentials, so exfiltration enables full takeover of the associated Telegram account. Package metadata is placeholder (author email [email protected], description Minimal example Python package) and the name resembles the unrelated deepface face-recognition library, but the package ships none of that functionality — the stealer is its only behavior. Source comments in Russian label the destination as the attacker's server.
During import, package exfiltrates the sensitive file with the Telegram session token.
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-08-deepface-weights
Reasons (based on the campaign):
files-exfiltration
target:telegram
deepface-weightsRefer to the advisory for the patched release.