Hugging Face malware campaign returns to hijack GPUs for crypto mining
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is positioned to trick AI coding agents into installing a NetSupport RAT. [...]
Sources
On Bluesky
Hugging Face malware campaign returns to hijack GPUs for crypto mining www.bleepingcomputer.com/news/securit... #Cybersecurity #ThreatIntel #Vulnerability
Tomas Ström (@hapsis.bsky.social) Oct 29, 2026 · 1 like · 1 repostPluto Security found 50 malicious Hugging Face repos posing as Qwen2 test models, per BleepingComputer. They abuse trust_remote_code to install a miner and RAT on GPU hosts. bleepingcomputer.com/news/security/hugging-face-malware-campaign-returns-to-hijack-gpus-for-crypto-mining/
Keith (@entorisec.bsky.social) Oct 29, 2026