Python PyPI Supply Chain Attack: Hackers Hide Malware in Fake DeepSeek Packages

Cybersecurity researchers at the Positive Technologies Expert Security Center (PT ESC) have uncovered a malware campaign targeting the Python Package Index (PyPI), a widely used repository for Python software. The attack specifically targeted developers, machine learning engineers, and AI enthusiasts who might integrate DeepSeek AI into their projects.

Discovery of the Attack

• The attack began on January 29, 2025, when a suspicious user named “bvk” uploaded two malicious packages: deepseeek and deepseekai.
• The account had been inactive since its creation in June 2023.
• These packages mimicked legitimate DeepSeek integrations but contained malicious code designed to steal sensitive information.

Malicious DeepSeek packages (Via PT ESC)

Malicious Package Behavior

• Once installed, the malware executed commands that:

  • Collected system information.
  • Stole environment variables, which often contain credentials for cloud storage, database access, or infrastructure resources.
  • Sent the stolen data to a command-and-control (C2) server hosted on Pipedream, a developer integration platform.

• Researchers suspect that AI-powered tools were used to generate parts of the malware, as evidenced by comments in the malicious code.