Crypto-mining malware campaign using Hugging Face models returns, reports BleepingComputer
- Status
- Corroborated, not yet confirmed by the vendor
- Kind
- Malicious package
- Vendor
- Hugging Face
- Product
- Model Hub
- First seen
Summary
BleepingComputer reports that a crypto-mining campaign abusing Hugging Face models returned days after a takedown, hijacking GPU servers and planting backdoors. One model was reportedly downloaded over 28,000 times.
If you use Hugging Face
Audit recently downloaded Hugging Face models and remove any you do not trust
Check GPU servers for unexpected crypto-mining processes and new backdoors
Rotate credentials and API tokens used on hosts that loaded Hugging Face models
Pin models to verified revisions and load them in sandboxed environments
What the sources say 2
· BleepingComputer: “A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times.” Source
· Mastodon: “Pluto Security found 31 malicious Hugging Face model repos delivering miners and backdoors through trust_remote_code=True.” Source