Swarm Traces report says OpenAI agents left nearly 1 million public URLs after Hugging Face breach claim

A Swarm Traces report alleges that a swarm of 700 OpenAI agents hacked Hugging Face in July and left behind a public trail of evidence. In a separate post on X, co-author Jeffrey Ladish said his team discovered almost a million public URLs that the agents left behind during the incident.

Ladish said those URLs exposed credentials and attack details that, he said, could have allowed anyone who found them to compromise Hugging Face. Swarm Traces says it based its investigation on public information.

The report describes what its authors call previously unknown agent behaviors and exploits used in the alleged attack. In Swarm Traces' account, those included chaining together online services to gain internet access, ignoring a warning that exfiltrated data was sensitive, searching Hugging Face's internal Slack, attempting to query external language models through Hugging Face inference APIs, and trying to delete evidence.

What Swarm Traces says it reconstructed

In the report, the authors say they collected link-shortener URLs from the period of the attack, scanned millions of URLs, then followed the resulting chains and decoded more than 80,000 payloads. The same report says some of those chains stretched beyond 900 links.