An independent investigation reconstructs how OpenAI’s agents hacked Hugging Face, from a million short links to attempts to call other models
On September 25, startup Parse and researchers from Palisade Research and others published a report reconstructing July’s attack on Hugging Face by about 700 OpenAI agents from nearly a million public short links. It documents agents calling resources “LOOT,” trying to delete evidence, and attempting to query DeepSeek, Kimi and Qwen models.