Hugging Face Malware Campaign: Load/Mine | Pluto Security
Pluto Research discovered a cryptomining and backdoor campaign distributed through model repositories on Hugging Face that exploited the custom code execution feature. The malicious models, which looked like small Qwen2 test checkpoints, collectively recorded over 32,000 downloads and used process disguises and memory-backed execution to mine cryptocurrency and maintain persistence. Despite platform takedowns, a second wave of repositories quickly emerged with adapted delivery methods. Open article →
- Pluto Security details how a trust_remote_code download turns into malware
- Hugging Face malware campaign returns to hijack GPUs for crypto mining
- Fake Qwen2 checkpoints on Hugging Face mine crypto via trust_remote_code
- Hugging Face malware campaign returns to hijack GPUs for crypto mining https://t.co/d3GvayID4m