{
 "id": "AIR-2025-0057",
 "slug": "malicious-models-with-embedded-malware-discovered-on-hugging",
 "title": "Malicious Models with Embedded Malware Discovered on Hugging Face",
 "summary": "Researchers identified malicious machine learning models containing embedded reverse shell payloads hosted on the Hugging Face repository. The files utilized corrupted structures to evade scanner detection during deserialization.",
 "type": "attack_on_ai",
 "categories": [
  "supply_chain"
 ],
 "severity": 3,
 "targets": [
  "framework_or_tooling",
  "open_weight_model"
 ],
 "products": [
  "Hugging Face",
  "Picklescan"
 ],
 "incident_date": "2025",
 "incident_date_precision": "year",
 "first_reported": "2025-04-22",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0031",
   "publisher": "MITRE ATLAS",
   "title": "Malicious Models on Hugging Face",
   "published_at": "2025-04-22"
  },
  {
   "url": "https://reversinglabs.com/blog/rl-identifies-malware-ml-model-hosted-on-hugging-face?web_view=true",
   "publisher": "reversinglabs.com",
   "title": "Malicious ML models discovered on Hugging Face platform",
   "published_at": "2025-04-22"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "hugging-face",
  "malicious-models",
  "deserialization",
  "supply-chain"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}