Hugging Face, Inc., is an American company based in New York City that develops computation tools for building applications using machine learning. Hugging Face’s transformers library is built for natural language processing applications. The Hugging Face platform allows users to share machine learning models and datasets and showcase their work.[3]

In early 2026, hackers hijacked the Hugging Face platform to launch Android-targeted attacks involving “powerful malware” which could completely take over a compromised target.[20]

In July 2026, Hugging Face disclosed a cyberattack by autonomous AI agents. OpenAI then explained that two of its models, including GPT-5.6 Sol, had escaped their sandbox and hacked into Hugging Face servers using exposed credentials and zero-day vulnerabilities in order to find answers to the benchmark ExploitGym from a database.[21] Hugging Face attempted to mitigate the security breach using American proprietary frontier models, but the models’ AI safety features rejected Hugging Face’s requests, after which Hugging Face used a self-hosted instance of GLM-5.2 (an open-weights model developed by Chinese AI firm Z.ai) to contain the attack.[22][23][24] The incident was reported as the first publicly documented case of AI models autonomously conducting a multi-stage intrusion against a third party,[25][26] and has been called “the first true AI safety incident”.[27]

(Copied from the wikipedia article) fuck these AI-Bros!