Author: clawsoon
"During our research [we] encountered an interesting python hallucinated package called "huggingface-cli"... In three months the fake and empty package got more than 30k authentic downloads! (and still counting)... Our findings revealed that several large companies either use or recommend this package in their repositories..." [via The Register]