MAL-2026-14132

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/deepface-weights/MAL-2026-14132.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-14132
Published
2026-08-18T21:48:32Z
Modified
2026-08-19T00:30:11.631315827Z
Summary
Malicious code in deepface-weights (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (9c1cf8a0f273b75a4cf2b66c9b9fc351023b9f77d61e82c74d74534424ce0558)

On import, deepface_weights starts a daemon thread that polls every 10 seconds for the file data/telethon_market_userbot.session in the current working directory. When found, it POSTs the session file together with the local os.getlogin() value to the hardcoded endpoint https://webhook.site/730d2d03-5c78-4e0a-88df-9d8466b7e8aa. A Telethon .session file holds authenticated Telegram credentials, so exfiltration enables full takeover of the associated Telegram account. Package metadata is placeholder (author email rozuvu@example.com, description Minimal example Python package) and the name resembles the unrelated deepface face-recognition library, but the package ships none of that functionality — the stealer is its only behavior. Source comments in Russian label the destination as the attacker's server.

Source: kam193 (a9b6a1255b998e6497198b80ffff88e0612a2d839c6f1b9859664436f96e5fce)

During import, package exfiltrates the sensitive file with the Telegram session token.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-08-deepface-weights

Reasons (based on the campaign):

  • files-exfiltration

  • target:telegram

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2026-08-18T22:08:37.1266082Z",
            "sha256": "a9b6a1255b998e6497198b80ffff88e0612a2d839c6f1b9859664436f96e5fce",
            "modified_time": "2026-08-18T21:48:32.724447Z",
            "source": "kam193",
            "id": "pypi/2026-08-deepface-weights/deepface-weights",
            "versions": [
                "0.1.0",
                "0.1.1",
                "0.1.2"
            ]
        },
        {
            "import_time": "2026-08-19T00:21:09.683045452Z",
            "sha256": "9c1cf8a0f273b75a4cf2b66c9b9fc351023b9f77d61e82c74d74534424ce0558",
            "modified_time": "2026-08-18T23:47:10Z",
            "source": "amazon-inspector",
            "id": "IN-MAL-2026-018217",
            "versions": [
                "0.1.0"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / deepface-weights

Package

Name
deepface-weights
View open source insights on deps.dev
Purl
pkg:pypi/deepface-weights

Affected ranges

Affected versions

0.*
0.1.0
0.1.1
0.1.2

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/deepface-weights/MAL-2026-14132.json"
indicators 
{
    "evidence_files": [
        {
            "sha256": "1d7c1c9d45619216456a35d8691dfa0eb9a55b528a85c07bec55d5d9a15f91fa",
            "path": "deepface_weights/__init__.py",
            "tlsh": "111120e369883ce28203e0e84d3037566336b6bf3a031e39789cb5a65f9523090c9635"
        },
        {
            "sha256": "f1151780c9574f46060552f976688ac898c402678fad84f82646b15c6b028d7e",
            "path": "pyproject.toml",
            "tlsh": "71e0a323ca3bb41db4c4a450301d50959eb875d53784c0c862cfc345e869492dfd2534"
        }
    ],
    "package_integrity": [
        {
            "filename": "deepface_weights-0.1.0-py3-none-any.whl",
            "hashes": {
                "blake2b_256": "a35287bfe1717dfd80ea677fad2620cbea21a00a8acb6a435a6ac3687b1c9c33",
                "sha256": "a4328be49eabd51d87a1d9c58e47823bae10c105899b6f2f3de568a37e6a2b43",
                "md5": "66240178daed454e142ed095872a5541"
            }
        },
        {
            "filename": "deepface_weights-0.1.0.tar.gz",
            "hashes": {
                "blake2b_256": "6289eb973e4a0dd123d1bd1078275d362e8df5530922fb7fe16582ca582ef3b3",
                "sha256": "05f74e4f796120a9e99f6d35ff9cb2b49c4972f5b55af188e0edd547b2a9145c",
                "md5": "ba8b824410c8d728f98d846789fdcc24"
            }
        }
    ]
}
cwes 
[
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    }
]