Skip to content
Threat Feed

Product

Gecko

1 brief RSS
high advisory

Malicious Hugging Face Repository Distributes Information Stealer

A malicious repository on Hugging Face, impersonating OpenAI's 'Privacy Filter' project, distributed information-stealing malware to Windows users by executing a PowerShell command that downloads and runs a Rust-based infostealer, which exfiltrates collected data to a command-and-control server.

Privacy Filter +3 huggingface infostealer malware supply-chain python powershell windows
2r 21t 1i