Security researchers have uncovered covert infostealer malware hidden in one of the top-ranking repositories on Hugging Face, ...
A fake repository mimicking OpenAI’s Privacy Filter on Hugging Face accumulated ~244,000 downloads before being removed. It delivered a multi-stage Rust infostealer ...
Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.
A single line of Python code was all it took. Developers who ran import lightning after installing versions 2.6.2 or 2.6.3 of the PyTorch Lightning package from PyPI triggered a hidden credential ...