huggingface-hubs

MAL-2024-10727

PyPItyposquat11/6/2024
Description

Malicious code in huggingface-hubs (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
9b93398e29b9d342c1401d2daa718f6cd0d56e8f9f7caa3a6c33cec141c5b671
bd90c8b1f384c441e6eabdf50b2ef9a6c2c6647b20a802079ba30a32844a1668
1d238b4266e7eb2a0fbda69d410f875e0625c30fcf79647d89c6e3358cbdcb55
05bec213a6346fd4442097b3f336a76e2ba70cd1cb345394c1f6e21cde8e9a12
Domains (1)
byted-dast.com
References (1)
https://bad-packages.kam193.eu/pypi/package/huggingface-hubsOSV
Details
EcosystemPyPI
Attack Typetyposquat
Published11/6/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001