[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnuD9Ysb7waJmeliV183K7EipUElUUzisJHHKCNn0BfY":3},{"article":4,"iocs":54,"watch_terms":68,"solutions":69,"lesson":35},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":33,"category":34,"article_tags":38},"e1acf365-17d1-4a1d-aeda-4ad6409430ff","Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads","fake-openai-privacy-filter-repo-hits-1-on-hugging-face-draws-244k-downloads-7f9a30","A malicious Hugging Face repository managed to take a spot in the platform's trending list by impersonating OpenAI's Privacy Filter open-weight model to deliver a Rust-based information stealer to Windows users. The project, named Open-OSS\u002Fprivacy-filter, masqueraded as its legitimate counterpart, released by OpenAI late last month (openai\u002Fprivacy-filter), including copying the entire","A malicious Hugging Face repository impersonated OpenAI's legitimate Privacy Filter model, reaching #1 on the platform's trending list with 244,000 downloads in 18 hours. The typosquatted project included a loader script that deployed a Rust-based information stealer targeting Windows users, harvesting Discord credentials, cryptocurrency wallets, browser data, and system metadata. HiddenLayer researchers identified six additional malicious repositories using similar Python loaders to distribute the same infostealer.","Fake OpenAI Privacy Filter repo on Hugging Face delivers Rust infostealer, hits #1 trending with 244K downloads.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F05\u002Ffake-openai-privacy-filter-repo-hits-1.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEiPtLFShq_XoM9Nzsl5kmSsF2UGsm6VhRoLNodcqRCdq45zqy4ekFVtamokNzEFifQknD502Wc0uFTBUdvLsBsYn4QAeVHSWLmhF2ROBMXutev8T6JjCGrrarzLhkSTUHLBq-nEWrF0WTb2epkX_3Ba5a6Gv_21R7PPQ_zCjhk7OU702Y10tJkcJiYG52D4\u002Fs1600\u002Fhugging-face-malware.jpg","2026-05-11T07:05:00+00:00","2026-05-11T10:00:06.332608+00:00",9,[17,20,22,25,28,30],{"name":18,"type":19},"OpenAI","vendor",{"name":21,"type":19},"Hugging Face",{"name":23,"type":24},"Privacy Filter","product",{"name":26,"type":27},"Open-OSS","threat_actor",{"name":29,"type":19},"HiddenLayer Research Team",{"name":31,"type":32},"Rust","technology","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":33,"icon":35,"name":36,"slug":37},null,"Supply Chain","supply-chain",[39,44,49],{"category":40},{"id":41,"icon":35,"name":42,"slug":43},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":45},{"id":46,"icon":35,"name":47,"slug":48},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":50},{"id":51,"icon":35,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55,59,62,65],{"type":56,"value":57,"context":58},"domain","api.eth-fastscan.org","C2 domain used to deliver second-stage batch script downloader",{"type":56,"value":60,"context":61},"recargapopular.com","Exfiltration domain where stolen data in JSON format is sent",{"type":56,"value":63,"context":64},"jsonkeeper.com","Dead drop resolver service used as payload switcher via Base64-encoded URL",{"type":43,"value":66,"context":67},"Privacy Filter Infostealer","Multi-stage information stealer that harvests Discord, crypto wallets, browser data, and system metadata",[18,21,29],{"controls":70,"vendors":151},[71,100,122],{"slug":72,"name":73,"problem":74,"products":75},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"slug":101,"name":102,"problem":103,"products":104},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[105,113,114],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-security-operations","Google Security Operations","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fsecurity-operations","Cloud SIEM and SOAR, formerly Chronicle.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"splunk","Splunk","\u002Fvendor-logos\u002Fsplunk.png","enterprise-security","Splunk Enterprise Security","https:\u002F\u002Fwww.splunk.com\u002Fen_us\u002Fproducts\u002Fenterprise-security.html","SIEM for detection, investigation and response, on premises or in the cloud.",{"slug":123,"name":124,"problem":125,"products":126},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[127,135,143],{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",{"vendor_slug":136,"vendor_name":137,"vendor_logo":138,"product_slug":139,"product_name":140,"url":141,"description":142},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",{"vendor_slug":144,"vendor_name":145,"vendor_logo":146,"product_slug":147,"product_name":148,"url":149,"description":150},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",[152],{"slug":153,"name":154,"logo_path":155,"roles":156},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png",[157],"reported_by"]