There’s so much in the public discourse like “omg what can possibly be done about these scenarios? AI has hacked huggingface!!”

No, openAi hacked huggingface.

If my claude code hacked huggingface, because of instructions I gave it, would I be totally free of consequences because “AI did it”?

I’m almost convinced openAI used such a crappy sandbox because they wanted it to “escape”. It plays into their two most important narratives: LLMs are genius gods that are worth lots and lots of money, and they’re scary enough that open weight Chinese models should be regulated.

Some criminal statute investigations are on hold, many of them are cases adjacent to giant stacks of cash