Popular Hugging Face Repo With 200K Downloads Executes Windows Malware

**Executive Summary:** A trending Hugging Face repository (Open-OSS/privacy-filter) with over 200,000 downloads is being used to distribute a Windows credential‑harvesting infostealer; malicious scripts disable SSL verification, fetch updated PowerShell commands from a public JSON paste, run a second-stage downloader that installs the payload, checks for admin rights, and adds Microsoft Defender exclusions. Researchers linked multiple repositories from the same user and shared infrastructure with prior npm typosquatting attacks, provided C2 domains and IOC entries, and advise full host reimages, credential rotation, network egress blocking, and threat hunting.