Hugging Face Malware Campaign Returns

A cryptomining campaign targeting Hugging Face repositories returned within days of being taken down, with the flagship model downloaded 28,412 times by October 28. Researchers found 31 malicious repos across seven accounts, while a separate fake Solana starter kit on GitHub remains live. The operator earned roughly $5,000 in Pearl cryptocurrency through the attacks.