Hugging Face, the primary online repository for generative AI, has hosted thousands of files containing hidden code that can poison data and steal information, including the tokens used to pay AI ...