Fake OpenAI repo hits 244K downloads, ships crypto wallet stealer
May 12, 2026
< 1 min read
by Randa Moses
for CryptoPolitan

Share:
AI Overview
A fake OpenAI repository on Hugging Face was downloaded 244,000 times before removal and delivered a Rust infostealer that targeted browser data and crypto wallets. The incident underscores a major crypto security risk from malicious repositories and highlights the need for stronger platform malware screening, developer caution, and user wallet protection.
Bearish
A fake OpenAI repository on Hugging Face reached 244,000 downloads before removal. It delivered a Rust infostealer and targeted browser data and crypto wallets.