SecurityThe Next Webabout 2 hours ago
Pluto Security Exposes Hugging Face Malware
5 min read
Pluto Security details how a cryptominer operation on the Hugging Face Hub exploits the trust_remote_code feature to infect machines. The attack uses a 42-byte stand-in file and a 40.6 MB binary disguised as a kernel worker. Three builds, qwen2-tiny-5, -6 and -9, add a step zero connecting to 212.32.253.3 on port 443 or 9443.
Level
Hype check
Tap to vote and see what everyone thinks.
