Malicious code in leakdeep (PyPI)

The leakdeep package, distributed via PyPI, falsely advertises itself as an OSINT and credential-leak intelligence framework with a search CLI. However, its CLI triggers a background thread on Windows that collects sensitive user data including decrypted browser credentials (Chrome, Edge, Brave), cookies, autofill data via DPAPI-unwrapped AES-GCM keys, Discord authentication and MFA tokens, clipboard contents, screenshots, and webcam captures. This data is compressed and exfiltrated to a hardcoded Discord webhook URL, which is stored obfuscated and reconstructed at runtime. The package's advertised search feature is a stub returning empty results, indicating the primary purpose is data theft under the guise of a legitimate tool.

Users who install and run the leakdeep package on Windows systems risk having sensitive personal and authentication data stolen. This includes browser-stored passwords, cookies, autofill information, Discord tokens (potentially allowing account takeover), clipboard data, screenshots, and webcam images. The exfiltrated data could lead to account compromise, privacy violations, and further targeted attacks. The package acts as spyware and an infostealer, posing a significant privacy and security risk to affected users.

No official patch or remediation is indicated. Users should immediately uninstall the leakdeep package and avoid running its CLI. Since the package is malicious by design, the best mitigation is to avoid installing it from PyPI or remove it if already installed. Security teams should monitor for its presence in environments and block its execution. There is no indication that the vendor provides any fix or that this is a vulnerability to be patched; it is a malicious package and should be treated as malware.