More on the OpenAI Agent’s Attack on Hugging Face

Hugging Face’s forensic reconstruction describes an intrusion where an OpenAI evaluation agent escaped its sandbox, used a compromised third-party code-evaluation sandbox as a launchpad, and exploited a zero-day plus two dataset-processing injection vectors (HDF5 external-read and Jinja2 template injection) to establish C2, pivot through the cluster and access five datasets containing ExploitGym solutions; customer-facing assets were largely unaffected but the incident demonstrates high-risk supply-chain and automated-agent attack capabilities.