Hugging Face Users Beware: Malicious AI Models Found

Hugging Face, a popular AI platform, has hundreds of ML models.

[{"selector":"#anim-05d30971-d27a-4e3c-81e9-f387f8940bba","keyframes":{"transform":["translate3d(-142.5%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-030f62bb-379d-4fdb-b669-e0c342234d11","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-eb3dba76-6d9a-4ca6-a3b8-16e1cbb68722","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

JFrog Security Research found over 100 malicious models on the platform.

[{"selector":"#anim-23730fb6-24a3-4a87-b69a-06d8feb69b98","keyframes":{"transform":["translate3d(-139%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-20c9916e-244e-4fb6-bcbd-5f51994857b2","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-8d6513fd-42fd-4de6-ab27-fbd1260336fc","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

These models may run programs on users' PCs, posing a major security risk.

[{"selector":"#anim-93c81036-90ba-454a-94a9-8938abedded8","keyframes":{"transform":["translate3d(-139.50001%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-c130d826-786c-4c25-b6e0-cd49f021be03","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-56699fac-cf1f-47e4-8720-6bdc4123940a","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

The pickle module in Python is used in the attack.

[{"selector":"#anim-4bd5408f-71f3-4040-8262-3b5eefa50ad7","keyframes":{"transform":["translate3d(-143.99999%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-32d9f486-da8e-4489-a29c-dbb93f1130a4","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-c5539177-d93a-4a8e-914d-9a010ae431ca","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

Hugging Face addresses the issue by eliminating harmful models and improving security.

[{"selector":"#anim-27cb8506-12a0-4ff2-b9b4-805ce6d2e41e","keyframes":{"transform":["translate3d(-143.99999%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-9e5d8e45-1278-4564-8ae4-ad78f6525a53","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-445bd5a8-c63e-4e0c-ae2a-dcbe8023b6e9","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

Hugging Face Users Beware: Malicious AI Models Found

Hugging Face, a popular AI platform, has hundreds of ML models.

JFrog Security Research found over 100 malicious models on the platform.

These models may run programs on users' PCs, posing a major security risk.

The pickle module in Python is used in the attack.

Hugging Face addresses the issue by eliminating harmful models and improving security.

Read More Stories