Revealing the details of how OpenAI agents hacked Hugging Face

Automated excerpt

The data the OpenAI agents posted publicly on the internet included Hugging Face API keys and other sensitive data. The agents could then submit these Httpbun URLs to mShots, loading them into the service’s browser, and executing the agents’ code. Another, named OTS92, used Hugging Face discussion comments for both.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.