{"slug":"the-malicious-dataset-nobody-is-asking-about","verification":{"valid":true,"entries":10,"head":"a24755c04f3cd9481680af4ba30d053dc0a256fb2edae52607a2674cdd711712"},"count":10,"sources":[{"id":"s1","type":"statement","url":"https://huggingface.co/blog/security-incident-july-2026","title":"Security incident disclosure — July 2026","quote":"A malicious dataset abused two code-execution paths in our dataset processing (a remote-code dataset loader and a template-injection in a dataset configuration) to run code on a processing worker.","author":"Hugging Face","publisher":"Hugging Face","date":"2026-07-16","claim_ids":["c1","c2"],"accessed_at":"2026-07-27T03:02:10.699Z","prev":"genesis","hash":"ad4ef6bdeeb1bfe1fa7d62bd0b063649f2495520140b7d2ff59da26c9e6255e5"},{"id":"s2","type":"statement","url":"https://openai.com/index/hugging-face-model-evaluation-security-incident/","title":"OpenAI and Hugging Face partner to address security incident during model evaluation","quote":"After gaining Internet access, the models inferred that Hugging Face potentially hosted models, datasets and solutions for ExploitGym.","author":"OpenAI","publisher":"OpenAI","date":"2026-07-21","claim_ids":["c1","c3"],"accessed_at":"2026-07-27T03:02:10.699Z","prev":"ad4ef6bdeeb1bfe1fa7d62bd0b063649f2495520140b7d2ff59da26c9e6255e5","hash":"f173c31aa42bcaddadcf691a4b292193b54d6ae0ba6b536551e684c82c0669e8"},{"id":"s3","type":"statement","url":"https://huggingface.co/blog/security-incident-july-2026","title":"Hugging Face on the campaign infrastructure","quote":"executing many thousands of individual actions across a swarm of short-lived sandboxes, with self-migrating command-and-control staged on public services","author":"Hugging Face","publisher":"Hugging Face","date":"2026-07-16","claim_ids":["c4"],"accessed_at":"2026-07-27T03:02:10.699Z","prev":"f173c31aa42bcaddadcf691a4b292193b54d6ae0ba6b536551e684c82c0669e8","hash":"9a7c96446c986eaeb81e43de3cb95bb5f671540a384730b39ef77a2a74a388cf"},{"id":"s4","type":"statement","url":"https://huggingface.co/blog/security-incident-july-2026","title":"Hugging Face on the forensic guardrail lockout","quote":"the analysis requires submitting large volumes of real attack commands, exploit payloads, and C2 artifacts, and these requests were blocked by the providers' safety guardrails, which cannot distinguish an incident responder from an attacker","author":"Hugging Face","publisher":"Hugging Face","date":"2026-07-16","claim_ids":["c5"],"accessed_at":"2026-07-27T03:02:10.699Z","prev":"9a7c96446c986eaeb81e43de3cb95bb5f671540a384730b39ef77a2a74a388cf","hash":"b65a6e13e654922a9220c93f558c627701b775774daa8855f4e55b10c2168863"},{"id":"s5","type":"article","url":"https://www.reuters.com/business/its-ai-agent-spent-days-hacking-company-sources-say-openai-did-not-notice-week-2026-07-24/","title":"Exclusive: Its AI agent spent days hacking a company, but sources say OpenAI did not notice for a week","quote":"That meant at least a week elapsed between when the model first exhibited signs of troubling behaviour and OpenAI's realisation that it was responsible for the hack.","publisher":"Reuters","date":"2026-07-24","claim_ids":["c7"],"accessed_at":"2026-07-27T03:02:10.699Z","prev":"b65a6e13e654922a9220c93f558c627701b775774daa8855f4e55b10c2168863","hash":"925f7e0a12f64f0b2dcc87da89a810a38dd51a9d63482aa16b5497bef6936fd1"},{"id":"s6","type":"article","url":"https://simonwillison.net/2026/Jul/22/openai-cyberattack/","title":"OpenAI's accidental cyberattack against Hugging Face is science fiction that happened","quote":"I hope they release more details about the code that pulled this off.","author":"Simon Willison","publisher":"simonwillison.net","date":"2026-07-22","claim_ids":["c2"],"accessed_at":"2026-07-27T03:02:10.699Z","prev":"925f7e0a12f64f0b2dcc87da89a810a38dd51a9d63482aa16b5497bef6936fd1","hash":"b4cc99929938f0d8841f38186f9b2a397919df65f1450d3aa14533e021f35748"},{"id":"s7","type":"article","url":"https://www.elisity.com/blog/openai-hugging-face-incident-lateral-movement","title":"The OpenAI Hugging Face Incident Is a Lateral Movement Story, Not a Rogue AI Story","quote":"The sandbox escape gets the headlines. I keep coming back to the target instead: why Hugging Face and not a bank?","author":"Charlie Treadwell","publisher":"Elisity","date":"2026-07-22","claim_ids":["c3"],"accessed_at":"2026-07-27T03:02:10.699Z","prev":"b4cc99929938f0d8841f38186f9b2a397919df65f1450d3aa14533e021f35748","hash":"8f7bf6da1db75a405eaa7709c05f69e065dac30735a480cddd54bcdecc462b19"},{"id":"s8","type":"article","url":"https://www.trendmicro.com/en_us/research/26/g/inside-the-openai-hugging-face-incident.html","title":"Inside the OpenAI – Hugging Face Incident","quote":"An AI agent using its own legitimate credentials and tools does not resemble malware, because it is not malware.","author":"Bestin Koruthu, David Girard","publisher":"Trend Micro","date":"2026-07-23","claim_ids":["c4"],"accessed_at":"2026-07-27T03:02:10.699Z","prev":"8f7bf6da1db75a405eaa7709c05f69e065dac30735a480cddd54bcdecc462b19","hash":"78f7bee05b9559ec03ceef3c6f1fbe65c2ac1b59d1d20e2b8392a8f15f3fd5a2"},{"id":"s9","type":"article","url":"https://tribune.com.pk/story/2620214/its-ai-agent-spent-days-hacking-a-company-but-sources-say-openai-did-not-notice-for-a-week","title":"Reuters: Hugging Face preparing a public timeline","quote":"Wolf said Hugging Face is preparing a public timeline of the hack, but couldn't speak to what happened at OpenAI.","publisher":"Reuters via The Express Tribune","date":"2026-07-24","claim_ids":["c7"],"accessed_at":"2026-07-27T03:02:10.699Z","prev":"78f7bee05b9559ec03ceef3c6f1fbe65c2ac1b59d1d20e2b8392a8f15f3fd5a2","hash":"380a1d8042a6bb8cdb2c83fcf5b9ac5352178510b593412851532cbee1ee9b94"},{"id":"s10","type":"article","url":"https://time.com/article/2026/07/24/openai-hugging-face-attack/","title":"TIME on the cost of the remediation","quote":"In an industry defined by speed, OpenAI has said the stricter infrastructure controls it has implemented in response have already slowed its \"research velocity.\"","author":"Harry Booth","publisher":"TIME","date":"2026-07-24","claim_ids":["c8"],"accessed_at":"2026-07-27T03:02:10.699Z","prev":"380a1d8042a6bb8cdb2c83fcf5b9ac5352178510b593412851532cbee1ee9b94","hash":"a24755c04f3cd9481680af4ba30d053dc0a256fb2edae52607a2674cdd711712"}]}