MicrosoftSystem64 Malware Abuses Hugging Face for Stealthy Data Theft

A sophisticated supply chain attack targeting the npm ecosystem has been uncovered, involving a malicious package named js-logger-pack that evolved into a powerful cross-platform malware loader. First observed in early April 2026, the package went through 29 incremental versions, gradually transforming from a seemingly benign logging utility into a full-scale information stealer and remote access Trojan. Despite […]

The post MicrosoftSystem64 Malware Abuses Hugging Face for Stealthy Data Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.