Modal are a hosting provider. It sounds to me like someone building on Modal deployed their own product that had an unauthenticated endpoint that could be used to launch and interact with a container.

▲

what 14 hours ago | parent | next [-]

That doesn’t explain how the endpoint was found…

	▲	brunoarueira 6 hours ago \| parent [-]
		Through the timeline, Hugging Face said that the rogue agent ran quietly and do a bunch of code search, so probably the endpoint is/was public through some repositories or the CyberGym style announce something like a broadcast. I don't have any expertise on this, just ideas that came to my mind!

▲

19 hours ago | parent | prev [-]

[deleted]