Pluto Security details how a trust_remote_code download turns into malware

Pluto Security analyzed a cryptominer attack on Hugging Face Hub exploiting the trust_remote_code=True feature in model loading, which allows malicious Python code execution without exploiting software bugs. The attack uses a model repository's config to import and run harmful code during model loading, bypassing antivirus scans that do not detect such plain Python files.