Threat Intelligence | The StealC Info-Stealing Chain Behind the Qwen Impersonation Repository

Background When downloading an open-source large model, you usually worry about whether it can run properly and whether the weights are authentic. This time, what you should really be worried about is hidden elsewhere: a repository labeled as containing a 27B-parameter model hands you only 487 KB — the package contains no model weights, but an information-stealing Trojan. On August 20, 2026, the GitHub repository unburdened-jackinthebox365/qwen38-uncensored committed a file…

Diamond Model