INTEL_REPORT
Hugging Face — Blog (ML / agents) · published 4/2/2026, 12:00:00 AM · TLP amber
Summary
Ingested excerpt (first ~500 chars of normalized text).
Welcome Gemma 4: Frontier multimodal intelligence on device Welcome Gemma 4: Frontier multimodal intelligence on device Hugging Face Models Datasets Spaces Buckets new Docs Enterprise Pricing Log In Sign Up Back to Articles Welcome Gemma 4: Frontier multimodal intelligence on device Published April 2, 2026 Update on GitHub Upvote 890 +884 merve merve Follow Pedro Cuenca pcuenq Follow Sergio Paniego sergiopaniego Follow ben burtenshaw burtenshaw Follow Steven Zheng Steveeeeee…
https://huggingface.co/blog/gemma4
sha256:b7bc05c5ec09ea4d60d9707ade9384bbc3aeb2744af0bb3dc8272cd614b43c76
What we pulled out
Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).
Indicators
Linked with report → mentions → indicator. Values open the indicator workspace.
| Type | Value | Link |
|---|---|---|
| domain | github.com | Open → |
| domain | config.json | Open → |
| domain | huggingface.co | Open → |
| domain | cdn-avatars.huggingface.co | Open → |
| url | https://cdn-avatars.huggingface.co/v1/production/uploads/661ab1f1fa3b144a381fa454/IlpZBb9NCjo7ntFwMIH53.png" | Open → |
| url | https://cdn-avatars.huggingface.co/v1/production/uploads/1583856921041-5dd96eb166059660ed1ee413.png" | Open → |
Malware families
Allowlist token matches only.
Threat actors mentioned
Allowlist mentions — not a formal attribution verdict.
ATT&CK techniques
MITRE IDs referenced in text and present in local technique table.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Browse the report corpus.
Neighborhood from the first linked indicator.
| domain | model.generate | Open → |
| domain | raw.githubusercontent.com | Open → |
| domain | llama.cpp | Open → |
| domain | mistral.rs | Open → |
| domain | model.device | Open → |
| domain | processor.decode | Open → |
| domain | models.json | Open → |
| domain | opencode.json | Open → |
| domain | opencode.ai | Open → |
| domain | install.sh | Open → |
| domain | trl.git | Open → |
| domain | sergiopaniego-carla-env.hf.space | Open → |
| domain | sergiopaniego-carla-env-2.hf.space | Open → |
| domain | google.cloud | Open → |
| domain | aiplatform.init | Open → |
| domain | aiplatform.customcontainertrainingjob | Open → |
| domain | train.py | Open → |
| domain | job.submit | Open → |
| domain | hf.co | Open → |
| domain | unsloth.ai | Open → |
| domain | blog.google | Open → |
| domain | helixar.ai | Open → |
| domain | www.happy-horse.net | Open → |
| domain | happyhorse-ai.co | Open → |
| domain | januverma.substack.com | Open → |
| domain | justdance.cc | Open → |
| url | https://huggingface.co/datasets/merve/vlm_test_images/resolve/main/landing_page.png | Open → |
| url | https://huggingface.co/datasets/merve/vlm_test_images/resolve/main/concert.mp4 | Open → |
| url | https://huggingface.co/datasets/merve/vlm_test_images/resolve/main/bird.png | Open → |
| url | https://huggingface.co/datasets/hf-internal-testing/dummy-audio-samples/resolve/main/obama_first_45_secs.mp3 | Open → |
| url | https://huggingface.co/datasets/merve/vlm_test_images/resolve/main/thailand.jpg | Open → |
| url | https://huggingface.co/datasets/merve/vlm_test_images/resolve/main/rockets.mp4 | Open → |
| url | https://opencode.ai/config.json | Open → |
| url | https://huggingface.co/datasets/huggingface/documentation-images/resolve/0052a70beed5bf71b92610a43a52df6d286cd5f3/diffusers/rabbit.jpg | Open → |
| url | https://raw.githubusercontent.com/EricLBuehler/mistral.rs/master/install.sh | Open → |
| url | https://raw.githubusercontent.com/EricLBuehler/mistral.rs/master/install.ps1 | Open → |
| url | https://github.com/huggingface/trl.git | Open → |
| url | https://sergiopaniego-carla-env.hf.space | Open → |
| url | https://sergiopaniego-carla-env-2.hf.space | Open → |
| url | https://hf.co/docs/google-cloud/examples/vertex-ai-notebooks-fine-tune-gemma-4 | Open → |
| url | https://unsloth.ai/install.sh | Open → |
| url | https://unsloth.ai/install.ps1 | Open → |
| url | https://cdn-avatars.huggingface.co/v1/production/uploads/69ca663fad013503716ed324/VtTtCgN_7ON1oaGL9xSld.jpeg" | Open → |
| url | https://cdn-avatars.huggingface.co/v1/production/uploads/60f0608166e5701b80ed3f02/H9LNnlf0W4fiOJhQMxnbW.jpeg" | Open → |
| url | https://cdn-avatars.huggingface.co/v1/production/uploads/no-auth/fzT8xB6I3UQGnkaZhsU5I.png" | Open → |
| url | https://cdn-avatars.huggingface.co/v1/production/uploads/61da105294f0d731ab0b0859/7H-9leuc5La30R-4lVZDd.png" | Open → |
| url | https://www.happy-horse.net | Open → |
| url | https://www.happy-horse.net\" | Open → |
| url | https://www.happy-horse.net</a | Open → |
| url | https://huggingface.co/mistralrs-community/models\" | Open → |
| url | https://huggingface.co/mistralrs-community/models</a | Open → |
| url | https://happyhorse-ai.co" | Open → |
| url | https://happyhorse-ai.co\" | Open → |
| url | https://happyhorse-ai.co</a | Open → |
| url | https://cdn-avatars.huggingface.co/v1/production/uploads/1617264212503-603d25b75f9d390ab190b777.jpeg" | Open → |
| url | https://github.com/huggingface/blog/pull/3340 | Open → |
| url | https://github.com/huggingface/blog/pull/3340\" | Open → |
| url | https://januverma.substack.com/p/research-briefings-gemma-4 | Open → |
| url | https://januverma.substack.com/p/research-briefings-gemma-4\" | Open → |
| url | https://januverma.substack.com/p/research-briefings-gemma-4</a | Open → |
| url | https://justdance.cc/\" | Open → |
| url | https://huggingface.co/mistralrs-community/models | Open → |
| url | https://happyhorse-ai.co | Open → |
| md5 | 402b52afa194a07ab91fae000ad418e6 | Open → |
| md5 | fb508277f3383176770c0c2e01878854 | Open → |
| md5 | f90d8bc7dfdab60380e73a40d6e727ae | Open → |
| md5 | d7ab665c472fa850392208d57575eff6 | Open → |
| md5 | e68c128c404f4e5f89baaa78b1b485b4 | Open → |
| md5 | 6b091ba6fcb3fe77c7d73417d7c485c9 | Open → |
| md5 | e5a716a8d08ab5ba1566dbaa9157dc05 | Open → |
| md5 | 84d85c26c92227f30ad590dd9d9535ee | Open → |
| md5 | c0ce522aba8add923f891877a4de508a | Open → |
| md5 | 8ca452917a718453ecf18632570fc3b2 | Open → |
| md5 | 3cebfff3ca209d1689a3e3b19d8c9852 | Open → |
| md5 | 4a842b2ff2332b03814a3939d44f979e | Open → |
| md5 | be22a11147c8ef251beca7ed584c483c | Open → |
| md5 | e6dce054b0ec062c4d0f0005a00c9d14 | Open → |
| md5 | 728488f9c34a2fda95350a5850fbd4fc | Open → |
| sha1 | 0052a70beed5bf71b92610a43a52df6d286cd5f3 | Open → |