The JFrog security team has discovered at least 100 malicious AI ML models on the Hugging Face platform. Some of these malicious models are capable of executing code on victim machines, providing persistent backdoors. Security researchers found models with malicious functionalities among the PyTorch and TensorFlow Keras models on the platform. For instance, a model uploaded by a user named baller423 can establish a reverse shell to the host 210.117.212.93. Some malicious models may be motivated by security concerns.