Fake OpenAI Repo Hit #1 on Hugging Face—And Stole Passwords While It Trended (opens in new tab)

A lookalike repository impersonating OpenAI's Privacy Filter model racked up 244,000 downloads in under 18 hours before Hugging Face pulled it.