The 'deepface-weights' PyPI package (versions 0.1.0, 0.1.1, 0.1.2) contains embedded malicious code that, upon import, initiates a background thread polling every 10 seconds for the presence of a Telegram session file named 'data/telethon_market_userbot.session' in the current working directory. When found, it exfiltrates this file along with the local OS username to a hardcoded webhook URL controlled by the attacker. Since the Telegram session file contains authenticated credentials, this exfiltration enables full compromise of the victim's Telegram account. The package metadata is clearly fake and the package does not provide any legitimate deepface functionality. Source code comments in Russian confirm the destination is the attacker's server.

Successful exploitation results in the theft of Telegram session credentials, allowing attackers full control over the victim's Telegram account. This can lead to unauthorized access, message interception, impersonation, and further compromise of the victim's contacts and data within Telegram.

Users should immediately uninstall the 'deepface-weights' package versions 0.1.0, 0.1.1, and 0.1.2 and avoid installing it. Since no official patch or fix is available, the best mitigation is to remove the malicious package and revoke any Telegram sessions that may have been compromised. Users should verify their Telegram account security and reset credentials if suspicious activity is detected.