MalwareBleeping Computer
9.0 — CRITICAL
Fake OpenAI repository on Hugging Face pushes infostealer malware
A malicious Hugging Face repository that reached the platform's trending list impersonated OpenAI's "Privacy Filter" project to deliver information-stealing malware to Windows users. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A malicious Hugging Face repository impersonated OpenAI's 'Privacy Filter' project, delivering infostealer malware to Windows users through a loader.py script that fetched and executed a PowerShell command.
⚙️Technical Details
💥Impact Assessment
Severity: critical
Who Is at Risk
Windows users who downloaded files from the malicious repository
🛡️Recommended Actions
1Reimage the machine
2Rotate all stored credentials
3Replace cryptocurrency wallets and seed phrases
📦Affected Products
Operating System: WindowsSoftware: Hugging Face repository
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.