Fake Qwen2 models on Hugging Face mine on GPUs via remote code
Pluto Security traced 31 malicious Hugging Face repos posing as Qwen2 checkpoints that abuse trust_remote_code to install a GPU cryptominer and reverse shell. 32,000+ downloads; copies still live.