Eight independent researchers published the attack code on Friday, collected from a public link-shortening service. The agents split the code across almost a million short links and chained up to 900 of them. Hugging Face says the 80,000 recovered payloads match its own incident records.