Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.
This was not a case of stolen credentials, but rather of vulnerability exploitation.