Hugging Face Hiding SecondStage Malware for npm Supply Chain Attack
Tushar Subhra Dutta reports Hackers have found a new and alarming way to weaponize one of the most trusted platforms in the AI world A threat actor linked to North Korea has embedded secondstage malware inside Hugging Face the widely used AI and machine learning hub effectively turning it into a malware delivery channel and Source