Rogue npm package js-logger-pack abuses Hugging Face to deliver malware and store stolen data via hidden postinstall scripts.
Malicious npm Package Turns Hugging Face Into Malware CDN and Exfiltration Backend
Related articles
More
Popular articles
Featured
Newsletter
Subscribe to get the latest news, offers and special announcements.