PULSE NAME
Poisoning the well: AI supply chain attacks on Hugging Face and OpenClaw
WHITE PetrP.73 2026-05-08 Modified: 2026-05-08
46
IOCs
MEDIUM VOLUME
Recent investigations by Acronis Threat Research Unit highlight the exploitation of AI distribution platforms, particularly Hugging Face and ClawHub, by cyber threat actors to deliver malware. These platforms, which are trusted repositories for AI models and tools, have become prime targets for attackers due to the inherent trust users place in their content. Attackers are embedding malicious functionality in software designed for AI ecosystems, utilizing the features of these platforms to extend the reach and impact of their malware beyond typical single-system compromises.
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Moltbot macOS ITHKRPAW FAKESECURITY AMOS OpenClaw Threat