pradyumn nand

https://www.varonis.com/blog/huggingface-breach#:~:text=stops%20being%C2%A0routine.-,What%20we%20know%20so%20far,-Once%C2%A0HuggingFace%E2%80%99s%C2%A0analysis

"ML datasets are often accompanied by custom loader scripts". I think that's what executed to abuse the code path.

I believe they are now either sanitising the loader scripts / blocking them completely. The former would be more practical.