SlowMist flags fake Qwen 3.8 27B GitHub repo hiding StealC info-stealer

An information-stealing virus was uploaded to a GitHub repository disguised as downloadable weights for Alibaba’s Qwen 3.8 27B model. 

SlowMist’s security team reported the incident on August 28, and anyone who runs open-source AI models locally could be at risk of credential theft.

There’s a fake Qwen AI model on GitHub 

On August 28, the SlowMist security team warned that someone had created a fake page on GitHub that looked like it offered the popular Qwen AI model for download. The page convincingly promised a fully offline AI that would keep user data private, but the trap was given away by the file size. 

The ZIP file on this fake repository was only 487 KB, which is less than half a megabyte, meanwhile a real AI model with 27 billion parameters takes up more than 16 GB of space on a computer. 

The malicious ZIP file, named uncensored_qwen_v2.6.zip, was created on August 20, 2026, and four days later, the attackers edited the README page so that all download links pointed directly to the harmful ZIP file. 

… Continue reading the full article at the original source below.