Tag: ai repository compromise

Hugging Face Hit by Resurgent Malware Campaign

Malware attackers cleverly exploited a tiny workflow change at Hugging Face, transforming trusted repositories into a powerful crypto-mining and backdoor distribution channel that racked up 28,412 downloads before being caught. In a cat-and-mouse game, 31 malicious repositories popped up across seven accounts in two waves since September, with attackers swiftly adapting to evade detection.