JFrog Reports 6.5x Increase in Malicious Hugging Face Models
Date: 2025-04
Affected: Hugging Face / Public Model Registries
Attack vector: supply-chain
Category: research
Severity: High

JFrog 2025 State of Software Supply Chain report documented 6.5x year-over-year increase in malicious ML models published to Hugging Face and 25,229 exposed secrets in public registries (+64% YoY).


Mitigations:

Architectural layers (MAESTRO):