Following disclosure of CVE-2026-39987, a critical pre-auth remote code execution flaw in the marimo Python notebook platform, multiple threat actors exploited this vulnerability to deploy NKAbuse malware variants hosted on typosquatted HuggingFace Spaces. The malware used the NKN blockchain for command and control and executed a range of attack techniques including reverse shell access, credential harvesting of AWS keys and API tokens, DNS exfiltration, and lateral movement to PostgreSQL and Redis databases using leaked credentials. The malicious binary was disguised as a Kubernetes tool named kagent and implemented persistence mechanisms across Linux and macOS systems. This operation demonstrates adversaries targeting AI/ML environments and abusing trusted open platforms for malware delivery.

Exploitation of CVE-2026-39987 enabled remote code execution without prior authorization, allowing attackers to deploy malware that facilitates reverse shell access, credential theft (including AWS keys and API tokens), data exfiltration via DNS, and lateral movement within networks to critical databases such as PostgreSQL and Redis. The malware's persistence mechanisms increase the difficulty of detection and removal. The use of trusted platforms like HuggingFace Spaces for malware hosting may increase the likelihood of successful infection. The campaign affected multiple countries and involved hundreds of exploit events, indicating a broad and active threat.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the meantime, organizations should monitor for indicators of compromise such as connections to known malicious IPs and domains, presence of suspicious binaries named kagent, and unusual persistence mechanisms like unauthorized systemd services, crontab entries, or macOS LaunchAgents. Restrict access to vulnerable marimo notebook instances and validate the authenticity of HuggingFace Spaces before use. Since no official patch information is provided, follow vendor advisories closely for updates.