.@trufflesec co-founder and CEO Dylan Ayrey on the danger of exposed credentials and the Hugging Face incident: "We partnered with Hugging Face to clean up credentials that had been exposed in training sets people hosted on their platform." "There were about a quarter million live keys, many of which had direct supply chain implications." "There was a foundational Linux library that one of the keys had direct push access to. It could have pushed malware to most machines on the…