Attackers have implanted 575 malicious packages on the platforms Hugging Face and ClawHub, according to a report by SlowMist CISO @im23pds. The attack involved the use of 13 different accounts to distribute these harmful packages, posing significant security risks to users of these platforms. The incident highlights the ongoing challenges in maintaining security within open-source ecosystems.