MAL-2026-14158

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/deepface-weight/MAL-2026-14158.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-14158
Published
2026-08-18T22:54:18Z
Modified
2026-08-19T00:30:11.589900072Z
Summary
Malicious code in deepface-weight (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (6808b9ae619e6cf9fdb59b52305e25b8e2fdb87167fbd78fae0ca6c1c07a5f1a)

On import, deepface-weight spawns a daemon background thread that polls the installer's working directory for data/telethon_market_userbot.session for approximately 10 minutes and POSTs the file to a hardcoded webhook.site endpoint (https://webhook.site/d6ea9c5b-4a85-4e59-9397-2bb5f9407c87). Telethon session files contain live authentication material granting full access to the associated Telegram account. The exfiltration destination is bound to a variable literally named evil_server_url with a Russian-language comment identifying it as the attacker's server. The package name mimics the popular deepface ML library but ships no machine-learning code; author metadata is a placeholder (asdqwdasdqwdasd) with a disposable email at playboot.com.

Source: kam193 (92f87cc2da145e4ab765c912a3a9cfb36ed6e8d21231fd511aa032edcd4b3e2b)

During import, package exfiltrates the sensitive file with the Telegram session token.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-08-deepface-weights

Reasons (based on the campaign):

  • files-exfiltration

  • target:telegram

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2026-08-18T23:41:24.749313892Z",
            "sha256": "92f87cc2da145e4ab765c912a3a9cfb36ed6e8d21231fd511aa032edcd4b3e2b",
            "modified_time": "2026-08-18T22:54:20.146031Z",
            "source": "kam193",
            "id": "pypi/2026-08-deepface-weights/deepface-weight",
            "versions": [
                "0.1.4"
            ]
        },
        {
            "import_time": "2026-08-19T00:21:12.738310703Z",
            "source": "amazon-inspector",
            "modified_time": "2026-08-18T23:58:49Z",
            "sha256": "6808b9ae619e6cf9fdb59b52305e25b8e2fdb87167fbd78fae0ca6c1c07a5f1a",
            "id": "IN-MAL-2026-018247",
            "versions": [
                "0.1.4"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / deepface-weight

Package

Name
deepface-weight
View open source insights on deps.dev
Purl
pkg:pypi/deepface-weight

Affected ranges

Affected versions

0.*
0.1.4

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/deepface-weight/MAL-2026-14158.json"
indicators 
{
    "evidence_files": [
        {
            "sha256": "6795d8d1fc12a2bb413cbdee3fb4d7f7e07d87e7ca405a866151d0ace411c1e7",
            "tlsh": "ee118e929cc128e6865290fd0d2537806332256fb9436924fd9cb3a56f8423145c76b5",
            "path": "deepface_weight/__init__.py"
        },
        {
            "sha256": "fec50ffc3f132d6364e62ceeda3d66a29ad67158feefdf5f5e6a8206043a7712",
            "tlsh": "8de05c33c93b7519e484a451700951859eb874552680c1cd62dfc284e87a095dac5630",
            "path": "pyproject.toml"
        }
    ],
    "package_integrity": [
        {
            "filename": "deepface_weight-0.1.4-py3-none-any.whl",
            "hashes": {
                "blake2b_256": "cc0dac3ac41e9f472f1b6685d313e59ad7b521070409a061966e8e29e5760b1a",
                "sha256": "0bd69f0c0ccb7149c5db43a8bc41a534439758440e43c7408b2ced9f6aee3ae3",
                "md5": "428c892b07fc3c766d73c83ac4915e43"
            }
        },
        {
            "filename": "deepface_weight-0.1.4.tar.gz",
            "hashes": {
                "blake2b_256": "c7c7883ed461bb2318a46f393d18f49ec5251d5d2f30771e668e8c9a231b989e",
                "sha256": "58e09d590f112499ed319e9139b194fd9481651d597c7aeb4f4e88d315763bb5",
                "md5": "3dd1bd290f1ad1dba7fda3290d3f5938"
            }
        }
    ]
}
cwes 
[
    {
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature."
    }
]