A cryptocurrency mining campaign has resurfaced on Hugging Face shortly after its earlier accounts were removed, using fake ...
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana ...
CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability.  The vulnerability is associated with Brotli decompression, so ...
Uma campanha de malware na Hugging Face baixada milhares de vezes explora a opção trust_remote_code para sequestrar GPUs ...