A malicious Hugging Face repository impersonating OpenAI's privacy filter hit number one, stealing passwords and crypto keys from thousands of developers.
