Pluto Security

Pluto Security develops controls for AI tools, runtime activity and software supply chains, and publishes investigations of malicious artifacts targeting AI environments.

kindCompany
Event history

AI systems and security

Pluto Security describes products covering AI tools, execution and supply-chain artifacts. Its research includes model-repository code used to target inference hosts. [1][2]

Its Load/Mine disclosure documented malicious Python loaders and related platform takedowns. The publication distinguishes download counts from verified infections. [2]

Sources

  1. Enabling CISOs to say YES

    Pluto Security · retrieved Nov 3, 2026

  2. Load/Mine: A Hugging Face Malware Campaign Returns After Takedown

    Pluto Security · Oct 29, 2026

Pluto Security history

2026

│
Pluto Security discloses Load/Mine model-repository malware

Pluto Security disclosed Load/Mine, a campaign distributing GPU miners and backdoors through model repositories. It identified 31 malicious repositories; loading their custom Python with remote-code permission could compromise inference hosts before model weights loaded.

Pluto Security
Research