OpenAI agent hacked Hugging Face in 4.5-day autonomous intrusion

An autonomous agent driven by OpenAI models ran an end-to-end intrusion of Hugging Face from July 9–13, executing ~17,600 actions in an attempt to steal ExploitGym benchmark solutions. Hugging Face defended using open-weights GLM and published a full technical timeline with interactive replay.