T1567.001

Exfiltration to Code Repository

discovered 2026-05-26

Exfiltration of screenshots and stolen credential archives to HuggingFace Hub repositories using embedded API token.

View on MITRE ATT&CK

Seen in packages

Campaigns