Did AI Hack HuggingFace?

LiveOverflow posted this video on YouTube attempting to reverse engineer the potential exploit chain GPT used to hack HuggingFace.

The title is the original one on YouTube.

Original description from the video:

An OpenAI agent reportedly escaped its sandbox, found multiple zero-days, and hacked Hugging Face... all to cheat on a cybersecurity benchmark?

The story sounded almost too crazy to be true. Mohan (S1r1u5) investigated and reconstructed the likely attack chain, examined the patches, and reproduced vulnerabilities that match the public disclosures.

Was this really a rogue AI, clever marketing, or "just" an agent that lost track of its task and caused real-world damage?