Hugging Face malware supply chain: typo-squat hits #1 trending — 244K downloads in 18h before takedown
Open-OSS/privacy-filter typo-squat hit #1 trending on Hugging Face May 11 — 244K downloads in under 18h. Windows infostealer via loader.py. Pin revision SHAs.