Malicious campaign returns to Hugging Face to hijack GPUs for crypto mining
Researchers at Pluto Security found 31 malicious repositories across seven Hugging Face accounts, disguised as small Qwen2 test checkpoints and targeting GPU hosts running popular self-hosted inference software such as Xinference and GPUStack. The most downloaded of these models had been pulled more than 28,000 times, and the campaign returned within days of an earlier takedown. Separately, the same researchers flagged a fake Solana starter kit on GitHub, live since late 2025, built to trick AI coding agents into installing remote-access malware. For a business that downloads ready-made models from public libraries to run on its own infrastructure, the case shows that provenance checks need to happen on every download, not just the first one.
Sources
This summary was written automatically with AI from the public sources listed above and checked by an independent AI reviewer before publication. For full details, read the original source.