Unverified60% confidenceEventExact time
Between 2023 and 2024, security researchers discovered malicious models on the Hugging Face platform multiple times, with attackers executing attacks by embedding malicious code in model serialization files.
2
Sources
60%
Confidence
Medium-term (~90 days)
Relevance
9/6/2026
First Seen
Valid until: 12/5/2026
Sources
Related Entities
Related Claims
UnverifiedFor platforms such as Hugging Face, attacks have been historically documented in which arbitrary code execution is triggered during model loading via malicious pickle files.80% similarUnverifiedBy 2024, security researchers had demonstrated indirect prompt injection attacks that hijack RAG system outputs by embedding hidden instructions in web pages76% similarUnverifiedSince 2024, multimodal jailbreak attacks have begun to emerge, with attackers embedding malicious instructions in images or audio to bypass text-level safety detection.74% similarUnverified2024年已有多份威胁情报报告记录了攻击者利用AI辅助编写钓鱼邮件、生成恶意代码变体和自动化侦察流程的案例73% similarUnverifiedMalicious actors planting backdoored models or tampering with weights on platforms such as Hugging Face could constitute supply chain attacks.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/864583API
curl https://kongchang.com/api/v1/knowledge/claims/864583MCP
get_claim(id=864583)