Title: New Malware Attack Exploits Marimo Vulnerability via Hugging Face
Hackers have recently taken advantage of a serious flaw in Marimo, a reactive Python notebook, to distribute a new variant of NKAbuse malware. The attacks began less than 10 hours after the vulnerability (CVE-2026-39987) was made public and involved hosting the malware on Hugging Face Spaces, a platform popular for AI development.
This breach affects users of Hugging Face, especially those utilizing its Spaces feature for interactive web applications. The malware is capable of stealing credentials and executing commands remotely, posing a significant risk to sensitive data.
To protect against this threat, users are urged to upgrade to Marimo version 0.23.0 or later immediately. If upgrading isn’t possible, blocking external access to specific endpoints is crucial.
Risk Level: High
As the attack is ongoing and exploits are evolving, users must remain vigilant.
Source: View Original Report
