Lucene search
+L

4 matches found

Snyk
Snyk
•added 2026/08/19 3:15 p.m.•16 views

Malicious Package

Overview deepface-weight is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/08/19 12:31 a.m.•3 views

Malicious code in deepface-weight (PyPI)

Source: amazon-inspector 6808b9ae619e6cf9fdb59b52305e25b8e2fdb87167fbd78fae0ca6c1c07a5f1a On import, deepface-weight spawns a daemon background thread that polls the installer's working directory for data/telethonmarketuserbot.session for approximately 10 minutes and POSTs the file to a hardcoded...

5.9AI score
SaveExploits0References4Affected Software1
osv_mal
osv_mal
•added 2026/08/18 10:54 p.m.•14 views

MAL-2026-14158 Malicious code in deepface-weight (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6808b9ae619e6cf9fdb59b52305e25b8e2fdb87167fbd78fae0ca6c1c07a5f1a On import, deepface-weight spawns a daemon background thread that polls the installer's working directory for data/telethonmarketuserbot.session for...

5.5AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/18 10:54 p.m.•32 views

Malicious code in deepface-weight (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6808b9ae619e6cf9fdb59b52305e25b8e2fdb87167fbd78fae0ca6c1c07a5f1a On import, deepface-weight spawns a daemon background thread that polls the installer's working directory for data/telethonmarketuserbot.session for...

5.5AI score
SaveExploits0References2
Rows per page
Query Builder