Pluto Security found 31 malicious Hugging Face model repos delivering miners and backdoors through trust_remote_code=True. Some payloads scanned clean, and code ran before the model loaded.
For admins using local AI/GPU hosts: review custom model Python, pin revisions, isolate workloads and hunt for persistence if a model ran. 32K+ downloads aren't confirmed infections.
https://pluto.security/blog/hugging-face-malware-campaign-load-mine/
Pluto SecurityHugging Face Malware Campaign: Load/Mine | Pluto SecurityPluto Research traces a Hugging Face cryptomining and backdoor campaign, its return after takedown, and indicators for investigating potential exposure.