A malicious credentials harvester was found in a popular HuggingFace repository named Open-OSS/privacy-filter

At the time of the discovery, the repository was listed as #1 in HuggingFace's trending section with more than 240,000 downloads

https://www.hiddenlayer.com/research/malware-found-in-trending-hugging-face-repository-open-oss-privacy-filter

Periodic reminder that HuggingFace models can include code, thus possibly malware too

RE: https://mastodon.social/@campuscodi/116550201730434193

RE: https://hachyderm.io/@dalias/113263575877116616

@campuscodi Obligatory