AI Industry’s Model Repositories Infected with Malware, Threatening Development Infrastructure

The AI software supply chains have been critically compromised. Hugging Face, a major repository hosting over a million machine learning models widely used across the AI industry, has been discovered to contain hundreds of malicious models. These infected models have the capability to execute harmful code on users’ devices, posing a significant security threat to AI development workflows.