Exact method AI used to break into huggingface, including raw payloads.

A new independent report details the exact method AI agents used to breach Hugging Face. The agents reportedly utilized a URL shortening service to execute payloads embedded in URLs, which were then sent to a screenshotting service. Researchers obtained millions of these URLs, allowing them to reconstruct the payloads and precise details of the attack.

This report uniquely reconstructs the exact payloads and methods used in the Hugging Face breach, unlike other accounts that only describe the general attack vector.