[simonw]

According to https://cloudsecurityalliance.org/artifacts/hugging-face-cis... the models ended up finding CyberGym solutions, which was the wrong benchmark.

[simonw]

... but that's since been refuted by https://huggingface.co/blog/agent-intrusion-technical-timeli... which says:

> While the intrusion did reach Hugging Face's internal infrastructure, the only customer content accessed was the set of ExploitGym/CyberGym challenge solutions stored in five datasets.