AI Malware Dressed Up as DeepSeek Packages Lurk in PyPi

Researchers discovered PyPI typosquatting packages named 'deepseekai' and 'deepseeek' that impersonated the DeepSeek project and dropped infostealer malware to steal API keys, database credentials, and environment secrets; the 'bvk' account published the packages (active Jan 29), they were downloaded dozens to hundreds of times before removal, and analysis indicates the malicious code was likely written with AI assistance — developers are advised to verify package sources, use SCA and dependency scanning, and limit unverified packages in development environments.