Hugging Face disclosed a July 2026 security incident.

First-party disclosure on their blog. The Hub is the default distribution point for weights and datasets across the entire ecosystem, so anything touching tokens or repo write access is a supply-chain event by definition. Rotate your HF tokens and audit repo write scopes. If you're pulling models programmatically in CI, that's the path to check first.