> When Hugging Face tried to investigate, analysing the intrusion meant submitting the attacker’s own code to commercial AI tools. Those tools refused, unable to tell an attacker from a victim.

This is a worrying part as well. Our tool broke into yours but you can not use our tool to fix it - sorry.