deepface-weight

{"schema_version":"1.7.4","id":"MAL-2026-14158","published":"2026-08-18T22:54:18Z","modified":"2026-08-19T00:23:19.725820708Z","summary":"Malicious code in deepface-weight (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (6808b9ae619e6cf9fdb59b52305e25b8e2fdb87167fbd78fae0ca6c1c07a5f1a)\nOn import, deepface-weight spawns a daemon background thread that polls the installer's working directory for `data/telethon_market_userbot.session` for approximately 10 minutes and POSTs the file to a hardcoded webhook.site endpoint (https://webhook.site/d6ea9c5b-4a85-4e59-9397-2bb5f9407c87). Telethon session files contain live authentication material granting full access to the associated Telegram account. The exfiltration destination is bound to a variable literally named `evil_server_url` with a Russian-language comment identifying it as the attacker's server. The package name mimics the popular `deepface` ML library but ships no machine-learning code; author metadata is a placeholder (`asdqwdasdqwdasd`) with a disposable email at playboot.com.\n\n## Source: kam193 (92f87cc2da145e4ab765c912a3a9cfb36ed6e8d21231fd511aa032edcd4b3e2b)\nDuring import, package exfiltrates the sensitive file with the Telegram session token.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-08-deepface-weights\n\n\nReasons (based on the campaign):\n\n\n - files-exfiltration\n\n\n - target:telegram\n","affected":[{"package":{"name":"deepface-weight","ecosystem":"PyPI"},"versions":["0.1.4"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"deepface_weight/__init__.py","sha256":"6795d8d1fc12a2bb413cbdee3fb4d7f7e07d87e7ca405a866151d0ace411c1e7","tlsh":"ee118e929cc128e6865290fd0d2537806332256fb9436924fd9cb3a56f8423145c76b5"},{"path":"pyproject.toml","sha256":"fec50ffc3f132d6364e62ceeda3d66a29ad67158feefdf5f5e6a8206043a7712","tlsh":"8de05c33c93b7519e484a451700951859eb874552680c1cd62dfc284e87a095dac5630"}],"package_integrity":[{"filename":"deepface_weight-0.1.4-py3-none-any.whl","hashes":{"blake2b_256":"cc0dac3ac41e9f472f1b6685d313e59ad7b521070409a061966e8e29e5760b1a","md5":"428c892b07fc3c766d73c83ac4915e43","sha256":"0bd69f0c0ccb7149c5db43a8bc41a534439758440e43c7408b2ced9f6aee3ae3"}},{"filename":"deepface_weight-0.1.4.tar.gz","hashes":{"blake2b_256":"c7c7883ed461bb2318a46f393d18f49ec5251d5d2f30771e668e8c9a231b989e","md5":"3dd1bd290f1ad1dba7fda3290d3f5938","sha256":"58e09d590f112499ed319e9139b194fd9481651d597c7aeb4f4e88d315763bb5"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/deepface-weight"},{"type":"PACKAGE","url":"https://pypi.org/project/deepface-weight/0.1.4/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-08-deepface-weights/deepface-weight","import_time":"2026-08-18T23:41:24.749313892Z","modified_time":"2026-08-18T22:54:20.146031Z","sha256":"92f87cc2da145e4ab765c912a3a9cfb36ed6e8d21231fd511aa032edcd4b3e2b","source":"kam193","versions":["0.1.4"]},{"id":"IN-MAL-2026-018247","import_time":"2026-08-19T00:21:12.738310703Z","modified_time":"2026-08-18T23:58:49Z","sha256":"6808b9ae619e6cf9fdb59b52305e25b8e2fdb87167fbd78fae0ca6c1c07a5f1a","source":"amazon-inspector","versions":["0.1.4"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}