Comment by vedanshchauhan9
6 hours ago
After the HuggingFace incindent, these things keep on happeneing. Last week Railway and PHP faced these problems and now its Binance. The flood gates are now open.
6 hours ago
After the HuggingFace incindent, these things keep on happeneing. Last week Railway and PHP faced these problems and now its Binance. The flood gates are now open.
You are mixing stuff up.
Floodgates were already open somewhere in August 2025 around that time we got Sha1-Hulud and phishing of NPM contributors. Those supply chain attacks were happening all the time since then in smaller and bigger amounts.
Other thing was Mythos, project Glasswing and start of really AI assisted vulnerability research. This on the other hand gave us plenty of new CVE to patch. If some project had in June 2025 0-3 new vulnerabilities, June 2026 it had 13-18.
It is just a rollercoaster in cybersecurity last 2 years already. But Hugging face incident is IMO not that noteworthy if you tried doing any task with AI agent on your own.