Fake OpenAI repository on Hugging Face pushes infostealer malware
Malicious Hugging Face repository impersonating OpenAI's Privacy Filter delivers infostealer malware.
A typosquatted repository on Hugging Face impersonating OpenAI's "Privacy Filter" project briefly reached the platform's trending list and accumulated 244,000 downloads before removal. The malicious repository contained a loader.py script that fetched and executed a Rust-based infostealer targeting browser data, cryptocurrency wallets, SSH credentials, Discord tokens, and system information. The stolen data was exfiltrated to a C2 server at recargapopular[.]com, with researchers noting anti-analysis features and potential overlaps with npm typosquatting campaigns distributing WinOS 4.0.
AI summary of the linked source. Not reviewed by an editor. How this works
Run OpenAI?
Get an email when a new story names OpenAI, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- domain — recargapopular[.]com
- malware — sefirah
- malware — WinOS 4.0