Evidence · DiggingBeagle record
Pluto: Load/Mine malicious Hugging Face model repositories
Original analysis of the Load/Mine campaign, executable model configuration, mining infrastructure and privileged GPUStack variant.
- Published
- Oct 29, 2026
- Source role
- primary disclosure
Evidence record
Original analysis of the Load/Mine campaign, executable model configuration, mining infrastructure and privileged GPUStack variant.
Claim-level citations (2)
- supportsLoad/Mine used executable model configuration to place miners on AI workers: Pluto identified malicious Hugging Face model repositories that caused Python execution at model loading and linked mining activity; reported download totals are not verified victim totals.
Pluto report, campaign inventory and malicious model auto_map loading
- supportsLoad/Mine used executable model configuration to place miners on AI workers: Pluto described a second stage attempting host-disk access from a privileged GPUStack container, not a demonstrated escape from a default unprivileged container.
Pluto report, GPUStack privileged container stage and host mount prerequisites