Event ·Multi-source

TruffleSec CEO谈Hugging Face凭证泄露：25万密钥暴露

Truffle Security联合创始人兼CEO Dylan Ayrey透露，与Hugging Face合作清理了训练集中暴露的凭证，发现约25万个有效密钥，许多直接影响供应链。其中一把密钥对某基础Linux库拥有直接推送权限，可能向全球大多数机器推送恶意软件。清理过程中，Hugging Face CTO告知OpenAI发生安全事件，事件响应中首先列出的就是被盗凭证。

Current read

Dylan Ayrey亲口讲Hugging Face那次泄露有多吓人，25万把有效密钥里还有能改Linux库的，赶紧检查自己有没有把密钥挂网上。

11 sources81° AI heatLast updated 2026/8/7 18:15:25

Evidence

11 sources

Primary sourcea16z

2026/8/7 18:15:25View source

Related source 1Greg Brockman

2026/8/5 20:06:28View source

Related source 2IT之家

2026/8/6 02:04:30View source

Related source 3Thomas Wolf

2026/8/6 09:50:01View source

Related source 4Decoder

2026/8/6 10:11:02View source

Related source 5Simon Willison

2026/8/7 02:09:11View source

Related source 6小互

2026/8/7 11:02:32View source

Related source 7AI 热点 · 原创

2026/8/7 09:02:16View source

Related source 8@OpenAIDevs

2026/8/6 21:45:03View source

Related source 9techcrunch

2026/8/7 22:48:24View source

Related source 10Lenny Rachitsky

2026/8/8 23:00:32View source

Conflict check

Dedup data only shows that these sources discuss the same event, not that they agree. There is no structured supporting or refuting evidence yet, so no conflict is inferred automatically.

Open the story