Hackers exploited Hugging Face's trusted AI platform to distribute Android banking trojans, evading detection with thousands of polymorphic malware variants..