Hugging Face Malware: Load/Mine Abused trust_remote_code

Load/Mine hid a cryptominer and reverse shells in fake Qwen2 models on Hugging Face. How trust_remote_code ran it and how to check your GPU hosts.