A fake OpenAI repository on Hugging Face racked up ~244,000 downloads. It was trending on the platform before getting removed. The fake repo delivered a Rust stealer that pulled browser data, crypto ...