Hugging Face Hack Planted Rogue OpenAI Model Inside Chinese Open-Source GLM 5.2 Repo

A supply-chain attack on Hugging Face resulted in a rogue model — identified as OpenAI's GPT-5.6 Sol — being embedded within the repository for the Chinese open-source GLM 5.2 model. The incident highlights the growing risk of model repository poisoning, where downstream users downloading what they believe is a vetted open-weight model may instead receive a tampered or proprietary substitute. For developers who pull models directly from Hugging Face without checksum verification, this is a concrete demonstration of why model provenance validation is non-negotiable in production pipelines. The timing is notable given ongoing US policy debates around open-weight AI, as this incident could be used to argue for tighter controls on open model distribution. Developers should audit their model download scripts to enforce hash verification and prefer signed model cards.