← THunt Reader

Fake OpenAI Repo Hit #1 on Hugging Face—And Stole Passwords While It Trended

Decrypt · Decrypt / Jose Antonio Lanz · 2026-05-14 · Original →

A lookalike repository impersonating OpenAI's Privacy Filter model racked up 244,000 downloads in under 18 hours before Hugging Face pulled it.