DeepSeek AI tools impersonated by infostealer malware on PyPI

Positive Technologies discovered two malicious PyPI packages (deepseeek and deepseekai) impersonating DeepSeek AI that, when executed, stole developer user/system data and environment variables (API keys, tokens, DB credentials) and exfiltrated them to a Pipedream C2; the packages were removed after being downloaded 222 times and affected developers should rotate credentials and review cloud resources.