A malicious Hugging Face repository that reached the platform's trending list impersonated OpenAI's "Privacy Filter" project to deliver information-stealing malware to Windows users. [...]
Fake OpenAI repository on Hugging Face pushes infostealer malware
Summary + source link. No paywalls, no tracking.