TLDR Tech / IT
Fake OpenAI repository on Hugging Face pushes infostealer malware
A malicious Hugging Face repository, Open-OSS/privacy-filter, impersonated OpenAI to distribute Rust-based infostealer malware. The repository reached 244,000 downloads before removal. The malware targets browser data, cryptocurrency wallets, and credentials, using anti-analysis techniques to evade detection. Victims should reimage machines and rotate all compromised credentials immediately.
Read the full story