BLAST RADIUS

Open-weight & owned stack · Open ecosystem

Hugging Face Model Download Executed Cryptominer Malware

Oct 29, 2026. Covered by 7 outlets.

Pluto Security reported that a Hugging Face model using trust_remote_code executed a cryptominer and, in some builds, a reverse shell while evading standard scanners.

Read the original at thenextweb.comOpens the publisher's site in a new tab

Also covering this

More in Open-weight & owned stack