A malicious campaign targeting Hugging Face models has resurfaced, hijacking GPU servers for cryptocurrency mining and deploying backdoors shortly after a previous takedown. One compromised model accumulated over 28,000 downloads. Additionally, a fake GitHub repository targeting AI coding agents was observed distributing a remote access trojan.

hugging-facecrypto-miningmalwareai-security
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →