Marimo exploitation delivered through a typosquatted Hugging Face Space

Attackers are using **Hugging Face Spaces** to distribute a typosquatted **vsccode-modetx** Space that hosts **install-linux.sh** and a **kagent** binary for malicious delivery. The chain followed exploitation of **CVE-2026-39987** in **Marimo** reactive Python notebook, then used curl to fetch the script and install a previously undocumented **NKAbuse** variant. The payload runs shell commands and returns output to the operator, while persistence can be established with **systemd**, **cron**, or **macOS LaunchAgent**. The abuse turns a trusted cloud-hosted development service into post-exploitation infrastructure and reduces the chance that victims will question the download source. Available evidence ties the activity to active exploitation of **CVE-2026-39987** and a delivery path that uses a malicious Space rather than a direct vendor-hosted payload. Recommended response is to upgrade **Marimo** to **0.23.0** or later or block external access to **/terminal/ws**; available evidence does not identify the operator or quantify reach.