GitHub Repo Mimics Qwen Model, Warns SlowMist Security Team
A GitHub repository has been identified as impersonating the Qwen model, as confirmed by the SlowMist Security Team. This alarming discovery could pose significant risks to users who might unknowingly download malicious software disguised as legitimate model files. The official Qwen project has not been compromised, but users are urged to exercise caution when downloading related files. For more details, check out the full analysis by SlowMist here.
The Key Development
The SlowMist Security Team recently reported a GitHub repository that mimics the Qwen 3.8 27B model, raising serious security concerns. The repository delivered an asset that was only 487 KB, far below the expected size of a legitimate model, which should exceed 16 GB. This malicious package contained an obfuscated Lua script that collects sensitive host data and sends it to command-and-control servers. Although the official Qwen project remains secure, this incident highlights the need for heightened vigilance among users regarding software downloads.
โฆ Continue reading the full article at the original source below.
