A 42-byte weight file, 32,000 downloads, and a GPU cluster mining for someone else: the Load/Mine campaign on Hugging Face
Summary
On October 29, 2026, Pluto Security published the Load/Mine campaign: 31 malicious model repositories across 7 Hugging Face accounts, totaling more than 32,000 downloads, installing a cryptomi