Trending Hugging Face Repo With 200k Downloads Executes Malware on Windows Machines

**Executive Summary:** A malicious Hugging Face repository (Open-OSS/privacy-filter) posed as a privacy-filter tool and delivered a multi-stage Windows malware chain: a Python loader and PowerShell batch downloader installed a Rust-based infostealer that evaded analysis, collected browser credentials, SSH keys, VPN/FTP data, wallet files, and screenshots, and exfiltrated stolen data to a command-and-control server; the report includes IoCs, related repositories, persistence details (MicrosoftEdgeUpdateTaskCore), and remediation guidance (isolate affected hosts, rotate/revoke credentials and tokens, reimage).