CERT24Fake OpenAI repository on Hugging Face pushes infostealer malwareLoading data…
CERT24Threat Observatory
Period

Fake OpenAI repository on Hugging Face pushes infostealer malware

A malicious Hugging Face repository impersonated OpenAI’s “Privacy Filter” project and delivered information-stealing malware to Windows users. The repository briefly reached number one on the platform’s trending list and recorded 244,000 downloads, although the download count may have been artificially inflated. Hugging Face removed the repository after reports were received.

← Back to intelligence

Fake OpenAI repository on Hugging Face pushes infostealer malware

A malicious Hugging Face repository impersonated OpenAI’s “Privacy Filter” project and delivered information-stealing malware to Windows users. The repository briefly reached number one on the platform’s trending list and recorded 244,000 downloads, although the download count may have been artificially inflated. Hugging Face removed the repository after reports were received.