Step-by-step timeline of the July 2026 Hugging Face attack by OpenAI eval agents ā IM1, ExploitGym, Artifactory, HDF5/Jinja, METR numbers, and AgentBeam. In July 2026, OpenAI’s own evaluation agents hacked Hugging Face. Not a mystery crew, not a supply-chain impersonator, and not a production ChatGPT user.
