Security· ★★★· bearish·

Pluto Security Finds Self-Iterating Cryptominer Campaign in Hugging Face AI Models

  • —28 repositories across six Hugging Face accounts and a ModelScope mirror, 35 including linked repos
  • —Over 21,614 downloads, with 18,544 on the 16 live second-wave repositories
  • —A single repository, qwen2-tiny, accounted for about 97% of second-wave downloads
  • —The first-wave payout wallet received about 2,276 PRL, roughly $5,000, across 716 transactions
Why it matters: The payload runs via trust_remote_code=True and evaded ClamAV, Protect AI and JFrog scanners, exposing AI developers and their infrastructure to fileless miners and reverse shells.
Source: HackerNoon (crypto tag)
More on this
Security · Sep 18
AI model Claude helped find a chain of OpenAI vulnerabilities in 72 hours
 DeFi · Sep 28
Jupiter Ultra users face fewer sandwich attacks than rivals, three-year study finds
 DeFi · Sep 27
THORChain Faces Backlash Over Decentralized Model After Bitget Hack; RUNE Up 15.8%