Corrected headline: OpenAI uploaded hundreds of malicious packages to public repository, claims it was an accident and can't be prevented

[jenniferplusplus@hachyderm.io]

@alpacamale I'm not sure how you prudently distribute malware for months in support of breaching the security of a major compute service, on accident. It must, necessarily, be either negligent or malicious.

[kdekooter@mastodon.social]

@jenniferplusplus You are absolutely right. Of course they could have prevented it. As Cory Doctorow @pluralistic said: "The Hugging Face hack isn't a mysterious, supernatural occurrence. It's a Python loop and a chatbot"

See https://pluralistic.net/2026/09/12/god-in-the-box/

[f4grx@chaos.social]

@jenniferplusplus torment nexus has never be that close to reality

[liiwi@mastodon.social]

@jenniferplusplus Just wait for the demand of "defending" AI.

[rycochet@furs.social]

@jenniferplusplus 'Assholes who have spent the past five years launching cyberattacks on the open internet to scrape every last character for training data caught using malicious code to try and gain access to the few things that have kept them at bay. Assholes blame the machines for it.'

[brouhaha@mastodon.social]

@jenniferplusplus
It would have been absolutely TRIVIAL for them to prevent it. They could simply have never powered up their data centers. Better yet, never have built them in the first place. They would have saved a ton of money, too. It would have been a win all around!

[bladecoder@androiddev.social]

@jenniferplusplus It seems that AI companies are now competing for who's going to cause the most damage.

[ghostrunner@hachyderm.io]

@jenniferplusplus "Guns dont kill people, people kill people" but also "i sowwize, my trillion dollar pile of theft keeps breaking the law under my guidance, nothing to be done about it"