Fake OpenAI Repo Hit #1 on Hugging Face—And Stole Passwords While It Trended - TrendCloud