Don't miss their blogpost about the incident, which is long, detailed, and absolutely fascinating (but didn't make the HN homepage): https://huggingface.co/blog/agent-intrusion-technical-timeli...
Thread from yesterday: https://news.ycombinator.com/item?id=49089500
We've re-upped that thread and moved relevant comments to it, thanks!