Pluto Security found 31 malicious Hugging Face model repos delivering miners and backdoors through trust_remote_code=True. Some payloads scanned clean, and code ran before the model loaded. For admins using local AI/GPU hosts: review custom model Python, pin revisions, isolate workloads and hunt for persistence if a model ran. 32K+ downloads aren't confirmed infections. https://pluto.security/blog/hugging-face-malware-campaign-load-mine/ #Cybersecurity #Infosec #AISecurity #SysAdmin