Topic

Hugging Face

Coverage tagged hugging face.

Articles: 1
Desk: 1

Data graphic: a chain from from_pretrained with trust_remote_code=True, to an auto_map Python file that runs on import, to a /tmp/.cch/svc.py watchdog, to a memfd miner named kworker/u20:1 and a reverse shell to 212.32.253.3.

Load/Mine: Fake Qwen2 Models on Hugging Face Turned GPU Inference Hosts Into Miners

Pluto Security found 31 repos that run attacker code through trust_remote_code on Xinference and GPUStack hosts. A second wave got past Hugging Face's scanners.

Nov 8 · 4 min