Hugging Face malware campaign returns to hijack GPUs for crypto mining

As cited

Copy frozen at 2026-10-30 02:00 UTC (site build).

threat intel

Hugging Face malware campaign returns to hijack GPUs for crypto mining

A cryptomining campaign exploiting Hugging Face models resurged after takedown, hijacking GPU servers and installing backdoors in models downloaded tens of thousands of times. Separately, a counterfeit Solana starter kit on GitHub targets artificial intelligence (AI) coding agents to deploy a NetSupport remote access trojan (RAT).

Why it matters: ML engineers and organizations hosting or consuming Hugging Face models face GPU theft and system compromise; developers using AI coding assistants risk trojanized dependencies that execute attacker code on their infrastructure.

Source published

2026-10-29 22:09 UTC

First seen by Cybersecurity Tracker

2026-10-30 01:00 UTC