MAL-2026-14158None▾ SunlitMalicious code in deepface-weight (PyPI)
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
-= Per source details. Do not edit below this line.=-
On import, deepface-weight spawns a daemon background thread that polls the installer's working directory for data/telethon_market_userbot.session for approximately 10 minutes and POSTs the file to a hardcoded webhook.site endpoint (https://webhook.site/d6ea9c5b-4a85-4e59-9397-2bb5f9407c87). Telethon session files contain live authentication material granting full access to the associated Telegram account. The exfiltration destination is bound to a variable literally named evil_server_url with a Russian-language comment identifying it as the attacker's server. The package name mimics the popular deepface ML library but ships no machine-learning code; author metadata is a placeholder (asdqwdasdqwdasd) with a disposable email at playboot.com.
During import, package exfiltrates the sensitive file with the Telegram session token.
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-08-deepface-weights
Reasons (based on the campaign):
files-exfiltration
target:telegram
deepface-weightRefer to the advisory for the patched release.