Hackers Leveraged Hugging Face and ClawHub With 575+ Malicious Skills to Deploy Malware