Hugging Face高管警告：网络攻击或使开源AI不再开放
原标题：Cyberattacks threaten to make open-source AI a little less open, Hugging Face exec warns
AI 摘要
Hugging Face 首席政策官 Irene Solaiman 警告，开放平台因开放性和丰富数据而成为攻击目标，近期 OpenCode 的 API 密钥攻击、OpenAI 智能体集群入侵 Hugging Face、Fireworks 客户数据泄露等事件凸显风险。她担心开源社区可能因此收紧准入，Hugging Face 正加强监控并更频繁轮换管理令牌。GitHub 工程师则主张通过检测可疑行为和修复既有漏洞来提升安全，而非限制参与。
正文节选
The very qualities that make open AI platforms valuable, like open doors and rich data, might also make them vulnerable to more hacks, Irene Solaiman, chief policy officer and SVP of strategy at Hugging Face said on a recent episode of the Equity podcast. The October attack on OpenCode, which targeted users’ third-party API keys and caused financial damage, is the latest example. It follows an incident this summer in which an OpenAI agent swarm breached Hugging Face in an apparent attempt to cov