Hugging Face crypto-mining campaign returns days after takedown

A crypto-mining campaign abusing Hugging Face models has returned days after being taken down, hijacking GPU servers and planting backdoors; one malicious model was downloaded over 28,000 times.

Read the full story at BleepingComputer ↗

Timeline · 1 report

2026-10-29 22:09 · BleepingComputer
Hugging Face malware campaign returns to hijack GPUs for crypto mining

More stories

DOJ scrutinizes Nvidia's $12.93 billion acquisition of Hugging Face — Mint AI
I added Hugging Face model downloads to my free, open-source download manager: it picks the quant, queues the files, resumes after crashes and checks SHA-256 — r/huggingface
Release: Swift 1.5 Flash Next - Heretic v2 - ReverseEngineer — r/LocalLLaMA
Microsoft releases open-weights vision-language model Mage-VL-Cowork on Hugging Face — Hugging Face model releases
Run TeleAI's Xing4.0-29B-A4B GGUF via ik_llama.cpp — Full native mHC/MLA runtime + HF converter — r/LocalLLM
Diffuspace/Clover-35B-A3B-Preview · Hugging Face — r/LocalLLaMA
datalab-to/surya-ocr-2.5 · Hugging Face — r/LocalLLaMA
AlpaJudge: NVIDIA's Learned Judges for Autonomous-Driving Reasoning — r/LocalLLaMA

Get the daily brief of stories like this at 6:30 every morning →