Fake OpenAI Repo Hit #1 on Hugging Face—And Stole Passwords While It Trended

DecryptMay 12, 2026
openaihugging-facecybersecuritymalwarerepository

A fraudulent repository mimicking OpenAI's Privacy Filter model gained significant traction on Hugging Face, amassing 244,000 downloads in less than 18 hours before being removed. This incident highlights the risks associated with open-source platforms and the potential for malicious actors to exploit them for stealing sensitive information, such as passwords.

Read original source
← Back to AI Policy & Regulation