Fake OpenAI repository on Hugging Face pushes infostealer malware By Bill Toulas May 9, 2026 10:26 AM A malicious Hugging Face repository that reached the platform’s trending list impersonated OpenAI…
…to push infostealer New npm supply-chain attack self-spreads to steal auth tokens Backdoored PyTorch Lightning package drops credential stealer Hackers compromise Axios npm package to drop cross-platform malware Backdoored…
…Rather than advertising a static malware build, the posts portray an actively maintained MaaS platform evolving in near real time. February 2026 marked the initial commercial push. Early posts focused on establishing…
…Days later, the company released multiple emergency, out-of-band updates for all affected Windows platforms to fix the Windows 365 remote desktop connection issue. 99% of What Mythos Found Is Still…
…NGINX is a massively used web server and reverse proxy platform, powering a third of the top ranked websites . It can efficiently balance load by distributing incoming network traffic to multiple backend…