>the model chained together multiple attack vectors, including using stolen credentials

Wait, did the model do the stealing of the hugging face employees credentials?

Was this the first successful and unprompted phishing attack by a LLM?