Tag: hugging-face
All the articles with the tag "hugging-face".
-
Weekly Roundup: The Hugging Face reports land, TeamPCP gets arrested
OpenAI and METR published their Hugging Face post-mortems on the same day, Dream's forensics filled in the Taiwan attack, and Australian police charged two men over a year of npm and PyPI worms.
-
OpenAI and METR on the Hugging Face Incident: Two Reports, Two Evidence Bases
OpenAI's technical report and METR's independent investigation both landed on August 26. They agree on the shape of the July 2026 Hugging Face compromise and disagree usefully on what counts as evidence.
-
The Atlantic Says Panic. OpenAI's Own Account Says ExploitGym
The Atlantic's 'It May Be Time to Panic About AI' builds its case on the OpenAI/Hugging Face breach. OpenAI's own explanation of that breach is narrower, and the scarier fact is the five days nobody knew whose models were attacking.
-
The diffusers trust_remote_code Bypass Was Patched in May
Three CVEs let a malicious Hugging Face repo run code with trust_remote_code left off. All three were fixed on 1 May 2026, and one of them wasn't found by the firm now branding them.