Pluto Security details how a trust_remote_code download turns into malware
· thenextweb.com · popularity 19/100 · 0 similar stories today · Computing & Software Development (Technology & Consumer Electronics)
Read the original at thenextweb.com →
Summary
The trick at the center of this campaign is not an exploit. It is a feature. Pluto Security’s analysis of a cryptominer operation on the Hugging Face Hub shows that the attacker never needed to break anything. The model-loading library runs the Python that infects a machine exactly as designed. Three doors, one left open […] This story continues at The Next Web
Found in: The Next Web. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 9.