Tag
A fake repository impersonating OpenAI's Privacy Filter reached #1 on Hugging Face, downloading over 240,000 times before being removed. The malicious package distributed a Rust-based infostealer that targeted developer credentials, crypto wallets, and browser data.