GoKawiilCrypto-mining malware reappears on Hugging Face days after takedown
Researchers at Pluto Security identified 31 malicious model repositories across seven Hugging Face accounts, disguised as Qwen2 test checkpoints, that abuse the platform's trust_remote_code feature to run attacker-supplied Python code when a model loads. The most-downloaded fake model, with no real weights inside, installed a disguised cryptocurrency miner and in some cases opened a reverse shell; after Hugging Face and ModelScope removed the first wave of accounts, 19 new repositories appeared within days, including one with code able to break out of its container.