Hugging Face Malware Hijacks GPUs via trust_remote_code
A persistent cryptomining and backdoor campaign abused Hugging Face's trust_remote_code feature to execute malicious Python code on GPU inference servers, accumulating over 28,000 downloads of its flagship malicious model. The attacker demonstrated resilience by relaunching within days of takedown, introducing container escape capabilities in the second wave. This campaign highlights critical supply chain risks in the AI model ecosystem, particularly for organisations running self-hosted inference infrastructure.