CVE-2026-39987 update: How attackers weaponized marimo to deploy a blockchain botnet via HuggingFace

Threat actors rapidly weaponized CVE-2026-39987 in the marimo Python notebook platform to deploy a novel NKAbuse blockchain botnet via a typosquatted HuggingFace Space, highlighting how trusted AI/ML platforms are now being exploited for malware delivery, lateral movement, and credential theft.