Hugging Face Malware Crew Returns From the Dead to Mine Crypto on Your GPU

What happened

Pluto Security found 31 malicious Hugging Face repositories whose code, run via trust_remote_code, installed a disguised crypto miner and backdoors; the campaign returned within days of takedown. Separately, Air Security flagged a fake Solana starter kit on GitHub that could trick AI coding agents into installing a remote access trojan.