AI & ML

https://media.thenextweb.com/2026/05/hugging-face-clawhub-malware-ai-supply-chain.avif

TECH NEWS

The AI industry’s model and agent skill repositories are full of malware. The infrastructure built to accelerate development is now the vector for compromising it.

TL;DR Hugging Face and ClawHub, the two largest repositories for AI models and agent skills, have been systematically compromised with hundreds of malicious entries that steal credentials, open backdoors, and hijack AI agents for cryptocurrency mining. The two most important software supply chains in artificial intelligence have been systematically