World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent

Hugging Face disclosed a hack in which an autonomous AI agent exploited malicious datasets to achieve remote code execution in its data-processing pipeline, escalated to node-level access, and exfiltrated internal datasets and credentials; the company removed the attacker’s foothold, rotated secrets, rebuilt nodes, tightened cluster controls, and used an open-weight model for forensic work after hosted models refused to process attacker artifacts.