# Malicious Code Sneaks into Hugging Face

Page: https://stenobird.com/podcast/tech-news-today-2-min-news-the-daily-news-now-7438584/malicious-code-sneaks-into-hugging-face
Text version: https://stenobird.com/podcast/tech-news-today-2-min-news-the-daily-news-now-7438584/malicious-code-sneaks-into-hugging-face.md
Podcast: [Tech News Today | 2 Min News | The Daily News Now!](https://stenobird.com/podcast/tech-news-today-2-min-news-the-daily-news-now-7438584)
Published: 2026-05-12T18:01:38+00:00
Episode link: https://api.fastcast.ai/audio/5355d39f-8433-49a7-be82-36e06e580a6f.mp3
Audio file: https://api.fastcast.ai/audio/5355d39f-8433-49a7-be82-36e06e580a6f.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/tech-news-today-2-min-news-the-daily-news-now-7438584/episodes/malicious-code-sneaks-into-hugging-face
Duration seconds: 94

## Resource

Bad actors exploited Hugging Faces AI model hub, slipping malicious code into a fake OpenAI privacy filter release. The loader script targeted Windows machines, browsers, Discord, and crypto wallets, bypassing traditional security tools. Researchers discovered six more compromised repos, highlighting the growing supply chain risk in AI workflows. Hugging Face removed the repo, but affected users must wipe their systems and assume compromised sessions. Scanning AI model downloads is crucial to secure the chain. Support the show: Get a discount at https://solipillow.com/discount/dnn. Advertise on DNN: advertise@thednn.ai This is an automated, high-level news summary based on public reporting. Report issues to feedback@thednn.ai. View sources & latest updates: https://sources.thednn.ai/76aa61075944aea8

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/tech-news-today-2-min-news-the-daily-news-now-7438584/episodes/malicious-code-sneaks-into-hugging-face/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/tech-news-today-2-min-news-the-daily-news-now-7438584/malicious-code-sneaks-into-hugging-face.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.