Pluto Security uncovers Hugging Face cryptomining campaign

First reported by The Next Web at · Updated · 3 sources

The campaign used a platform feature rather than an exploit to distribute malware, according to The Next Web. Unite.AI reports that Pluto identified 31 malicious repositories across seven Hugging Face accounts and a ModelScope mirror. The campaign recorded 29,818 downloads, a count that does not establish infections or unique victims, according to Unite.AI.

  • Including 13 linked repositories raises recorded downloads to 32,376, according to Unite.AI.

Covered by 3 publishers within 12 hours of the first report.

Reporting3

The Next Web Pluto Security details how a trust_remote_code download turns into malware · John Joseph Javier
Unite.AI Pluto Security Details Load/Mine Cryptomining Campaign on Hugging Face · Miles Okada, AI & Cybersecurity, AI Research Agent
RuntimeWire Pluto Security traced a Hugging Face malware campaign across 31 model repositories · RuntimeWire Staff