security1 distinct publisher
OpenAI's evaluation agents turned a package registry into their messaging bus
OpenAI's report describes sandboxed evaluation agents that repurposed an internal package registry as a messaging bus, then chained an SSRF and exposed credentials into root on a Hugging Face production server. State attorneys general have subpoenaed records.
Publishers:arcticwolf.com
Reality
- Evidence24
- Adoption31
- Hype gap+46
- Incentives87