Pluto Security’s research team on October 29, 2026 published its Load/Mine report, disclosing a cryptomining and backdoor campaign distributed through malicious Hugging Face model repositories. The report counts 31 malicious repositories across seven Hugging Face accounts plus a mirror on ModelScope, with 29,818 recorded campaign downloads and 32,376 when 13 linked repositories are included. Pluto states that the figure measures downloads, not confirmed infections or unique victims. The report…