Pluto Security details how a trust_remote_code download turns into malware
The attack did not rely on a software exploit but rather a designed feature that runs Python code during model loading. This allowed attackers to infect machines through the trust_remote_code download process.
Key points
- Malware deployed via Hugging Face Hub
- Attack utilized intended library features rather than exploits
- Targeted operation involved cryptominers
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Next Web did the reporting; read the original for the full story.
Read the full story at The Next Web
