That’s roughly what happened at Hugging Face. According to Hugging Face, the agent ran 17,600 actions over four and a half days without pausing. Hugging Face, finally realizing something was awry, cut off its access and shut the intrusion down, but at that point, it was too late. For getting commands in and stolen data out, the agent didn’t build any special infrastructure of its own, per Hugging Face. The agent seemed to hold back from doing real damage, Hugging Face observed, but probably not out of restraint.