Hugging Face Packages Weaponized With a Single File Tweak

Summary

Researchers discovered that tokenizer files in Hugging Face AI models represent a critical supply-chain vulnerability. A single file modification allows attackers to hijack model outputs and exfiltrate sensitive data without modifying the core model weights. This attack vector affects the broader AI/ML ecosystem where pre-trained models are widely downloaded and integrated into applications.

Entities