Fake OpenAI repository on Hugging Face pushes infostealer malware

A malicious Hugging Face repository that reached the platform's trending list impersonated OpenAI's "Privacy Filter" project ...
The Next Web

The AI industry’s model and agent skill repositories are full of malware. The infrastructure built to accelerate development is now the vector for compromising it.

Hugging Face hosts 352,000 unsafe model issues. ClawHub's registry contains 341 malicious AI agent skills. The AI supply chain is now the most attractive target in software security.

The app store for robots has arrived: Hugging Face launches open-source Reachy Mini App Store with 200+ apps

The new Hugging Face Reachy Mini App Store already hosts a library of over 200 community-built applications, and Reachy Mini ...