{
 "id": "AIR-2025-0055",
 "slug": "organization-impersonation-and-model-poisoning-on-hugging-fa",
 "title": "Organization Impersonation and Model Poisoning on Hugging Face",
 "summary": "A security researcher demonstrated that fake organization accounts on Hugging Face could trick employees into granting access and allowing model replacements. The technique showed how attackers could substitute benign models with malicious versions containing malware.",
 "type": "attack_on_ai",
 "categories": [
  "supply_chain"
 ],
 "severity": 1,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Hugging Face"
 ],
 "incident_date": "2023-08-23",
 "incident_date_precision": "day",
 "first_reported": "2025-04-22",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0027",
   "publisher": "MITRE ATLAS",
   "title": "Organization Confusion on Hugging Face",
   "published_at": "2025-04-22"
  },
  {
   "url": "https://5stars217.github.io/2023-08-08-red-teaming-with-ml-models",
   "publisher": "5stars217.github.io",
   "title": "Model Confusion - Weaponizing ML models for red teams and bounty hunters",
   "published_at": "2025-04-22"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "supply-chain",
  "impersonation",
  "huggingface"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}