⌁AI·CYBER·BRIEF▌

#Xinference

AI Threats8 min read

Fake "test" models on Hugging Face mined crypto on GPU servers — and a second wave followed the first takedown

Pluto Security found 31 Hugging Face repos whose custom code installs a crypto miner and backdoors when loaded with trust_remote_code. Downloads top 32,000; second-wave repos now disabled.

Hugging FaceML supply chaintrust_remote_code