frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Fake Qwen2 checkpoints on Hugging Face mine crypto via trust_remote_code

https://pluto.security/blog/hugging-face-malware-campaign-load-mine/
2•sgiannopoulos•1h ago

Comments

billylo•43m ago
Highlights:

1) The config.json of the model has trust_remote_code=True. 2) Python runs exec_module() of the remotely downloaded class 3) HuggingFace scanning did not cover this vector