Researchers at Reversing Labs have discovered two malicious machine learning (ML) models available on Hugging Face, the leading hub for sharing AI models and applications.

A widely used python module for machine-learning developers can be loaded with malware and bypass detection measures.

Olympic scammers go for gold.

Developers targeted by malicious Microsoft VSCode extensions

ReversingLabs explained how attackers often use multiple platforms to spread their malware, creating a more extensive attack surface that targets developers across ecosystems.

In a report by Reversing Labs, researchers say the malicious extensions first appeared in the VSCode marketplace in October.