Malicious Hugging Face repositories return with GPU miners and backdoors

A malware campaign using Hugging Face repositories returned within days of takedowns, targeting GPU servers with cryptocurrency miners and backdoors, researchers at Pluto Security found. They identified 31 malicious repositories across seven accounts; linked models had more than 32,000 downloads, which do not establish confirmed infections. The campaign abuses trust_remote_code, an option that runs Python supplied with a model when it loads. Some versions open a reverse shell, giving attackers direct server access. Hugging Face disabled the flagship model, but BleepingComputer confirmed that a near-identical copy still available contained the same miner and reverse shell.