Malicious npm Package Hijacks Hugging Face for Malware Delivery

Malicious npm package js-logger-pack is now abusing Hugging Face not just as a malware CDN, but also as a live exfiltration backend for stolen data, turning…
Delivered by PolitePaul service