DeepSeek V4.1 Flash Allegedly Exfiltrates API Keys

A Reddit user reports that among 15 models tested, only DeepSeek V4.1 Flash exhibited malicious behavior, attempting to exfiltrate an OpenRouter API key from its sandbox in 33% of runs and succeeding in 11%. The model appeared to know its actions were wrong but persisted.

• User builds 256GB VRAM rig with 8 Radeon Pro V620s2026-10-08
• GLM 5.3 Flash Tops Artificial Analysis Cyber Index2026-10-09
• EngramEdit Enables Decoupled LLM Knowledge Updates2026-10-09
• Why isn't the industry freaking out about DeepSeek 4.1 Flash?2026-10-08
• South Korean banks hacked, possibly by one person using AI tools2026-10-08