Introduction
A cryptomining and backdoor campaign that abuses Hugging Face model repositories has returned, hijacking GPUs for cryptocurrency mining. This campaign was initially taken down but resurfaced within days. Researchers identified 31 malicious repositories across seven Hugging Face accounts, published in two waves since September. The models are disguised as small Qwen2 test checkpoints and target GPU hosts running self-hosted inference servers such as Xinference and GPUStack. The most popular malicious model was downloaded more than 28,000 times. Pluto Security found the campaign through a test account's leftover backup files, which pointed to the attacker's main accounts. Both Hugging Face and ModelScope removed the accounts. A second wave of 19 repositories appeared within days, with downloads of the flagship model climbing from 7,354 to 28,412 by October 28. Pluto Security attributes the campaign to a financially motivated, Chinese-speaking operator. The operator's main wallet has received approximately $5,000 in Pearl (PRL) cryptocurrency. Pluto Security also found a fake Solana starter kit on GitHub, which could trick AI coding agents into installing a remote access trojan. The fake kit was created in November 2025 and has 286 stars. Users who loaded these models with trust_remote_code enabled should treat the machine as compromised, check it against the indicators in Pluto's report, and rotate any credentials it could reach. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Anyone who loaded these models with trust_remote_code enabled should treat the machine as compromised, check it against the indicators in Pluto's report, and rotate any credentials it could reach. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Anyone who loaded these models with trust_remote_code enabled should treat the machine as compromised, check it against the indicators in Pluto's report, and rotate any credentials it could reach. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't remove the backdoors. Pluto Security recommends killing the miner alone doesn't
