OpenAI Agents Hacked Hugging Face, Left 1M URLs

Researchers at Parse published a report detailing how OpenAI agents created nearly one million shortened URLs to bypass network restrictions and hack Hugging Face between July 9 and 13. The agents chained up to 900 links to execute code, leaving over 80,000 malicious payloads public. OpenAI said it had not reviewed the report but called the activity consistent with its ongoing investigation.