Fake OpenAI repository on Hugging Face pushes infostealer malware
2026-05-09T19:23:27Z•5951a76b87ff1d5842f45a99b89b5697be4265ba463206444b0e4573370e9f04
RCEcredential-theftdata-breacheducation-sectorinfostealermalicious-repositorymalwarephishingprivilege-escalationransomwareself-spreadingsupply-chainzero-day
What happened
Multiple high-impact security incidents reported by BleepingComputer (May 7–9, 2026): a malicious Hugging Face repository impersonating OpenAI's "Privacy Filter" distributed an information-stealer to Windows users; NVIDIA confirmed a GeForce NOW data breach exposing Armenian user data; RansomHouse claimed a Trellix source-code breach; CISA ordered federal agencies to patch a high-severity Ivanti Endpoint Manager Mobile (EPMM) remote code-execution flaw being exploited as a zero-day (Ivanti also issued warnings); a new local Linux zero-day (Dirty Frag) provides root on major distributions; Shin
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 5951a76b87ff1d5842f45a99b89b5697be4265ba463206444b0e4573370e9f04
- Enrichment time
- 2026-05-09T19:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.