AI2026.05.09Malware Infiltration in AI Supply Chains: Analyzing the Systematic Compromise of Hugging Face and Clawhub