The Cloud Security Alliance has released a post-mortem of the OpenAI hack of Hugging Face

HF apparently reviewed and cleared the report

https://cloudsecurityalliance.org/artifacts/hugging-face-ciso-post-mortem