Hackers Use Hugging Face to Deliver npm Malware
Security researchers report a multi-stage npm supply chain campaign that delivered a cross-platform implant using Hugging Face as both a download host and an exfiltration backend. GBHackers reports the campaign centers…