Beware of Fake DeepSeek PyPI Packages Spreading Malware

Fake DeepSeek PyPI Packages Steal Developer Data – Protect Your Credentials Now! Threat actors are using fake DeepSeek packages on PyPI to steal API keys and credentials. 222 developers affected.

Threat actors are exploiting DeepSeek’s growing popularity to promote two malicious information-stealing packages on the Python Package Index (PyPI), which impersonate the developer tools of the AI platform.

The two packages are named “deepseeek” and “deepseekai,” mimicking the name of the AI startup DeepSeek. The company’s R1 large language model has recently skyrocketed in popularity.

Interestingly, these packages were uploaded by an “old” account created in June 2023, which had no prior activity record.