--- title: Fake OpenAI repository on Hugging Face pushes... description: A malicious Hugging Face repository impersonating OpenAI's 'Privacy Filter' project reached #1 on the platform's trending list and accumulated 244,000... canonical: https://daily.dev/posts/fake-openai-repository-on-hugging-face-pushes-infostealer-malware-cakkzapb4 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Fake OpenAI repository on Hugging Face pushes infostealer malware | daily.dev og:description: A malicious Hugging Face repository impersonating OpenAI's 'Privacy Filter' project reached #1 on the platform's trending list and accumulated 244,000... og:url: https://daily.dev/posts/fake-openai-repository-on-hugging-face-pushes-infostealer-malware-cakkzapb4 og:image: https://api.daily.dev/og/posts/cAKkZapb4.png og:image:alt: Fake OpenAI repository on Hugging Face pushes infostealer malware og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Fake OpenAI repository on Hugging Face pushes infostealer malware **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 8 upvotes · 0 comments ## Summary A malicious Hugging Face repository impersonating OpenAI's 'Privacy Filter' project reached #1 on the platform's trending list and accumulated 244,000 downloads before being removed. The repository contained a loader.py Python script that appeared to be AI-related code but secretly fetched and executed a PowerShell command chain, ultimately deploying a Rust-based infostealer. The malware targets browser credentials, Discord tokens, cryptocurrency wallets, SSH/FTP/VPN configs, and system data, exfiltrating everything to a C2 server. It also includes extensive anti-analysis features. Researchers at HiddenLayer linked the infrastructure to other malicious repositories and an npm typosquatting campaign distributing the WinOS 4.0 implant. Affected users are advised to reimage machines, rotate all credentials, and replace crypto wallets. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Malicious Hugging Face model masquerading as OpenAI release hits 244K downloads](https://daily.dev/posts/malicious-hugging-face-model-masquerading-as-openai-release-hits-244k-downloads-xftpmcpz1) · CSO Online · 0 upvotes · 0 comments - [Hugging Face and ClawHub compromised with hundreds of malicious AI models and agent skills as supply chain attacks target AI infrastructure](https://daily.dev/posts/hugging-face-and-clawhub-compromised-with-hundreds-of-malicious-ai-models-and-agent-skills-as-supply-xjnujrk1y) · The Next Web · 4 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#openai](https://daily.dev/tags/openai), [#malware](https://daily.dev/tags/malware) [View this post on daily.dev](https://daily.dev/posts/fake-openai-repository-on-hugging-face-pushes-infostealer-malware-cakkzapb4) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Fake OpenAI repository on Hugging Face pushes infostealer malware","url":"https://daily.dev/posts/fake-openai-repository-on-hugging-face-pushes-infostealer-malware-cakkzapb4","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/fake-openai-repository-on-hugging-face-pushes-infostealer-malware-cakkzapb4"},"datePublished":"2026-05-09T14:34:52.552Z","dateModified":"2026-05-09T15:15:33.959Z","description":"A malicious Hugging Face repository impersonating OpenAI's 'Privacy Filter' project reached #1 on the platform's trending list and accumulated 244,000...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4459db2c7d6e0896d65a54be95410cac?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4459db2c7d6e0896d65a54be95410cac?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/fake-openai-repository-on-hugging-face-pushes-infostealer-malware-cakkzapb4","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":8},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,openai,malware","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Fake OpenAI repository on Hugging Face pushes infostealer malware"}]} ```