Hugging Face suspected of hosting large numbers of models usable for cyberattacks

Hugging Face hosts a large number of models with safety guardrails removed; in July alone, more than 6,500 models were labeled abliterated, uncensored, or heretic, potentially allowing almost anyone to launch AI-driven cyberattacks. The platform's content policy prohibits models designed to disrupt systems, enable unauthorized access, or generate malicious code, but removing guardrails does not necessarily mean attack use; in early October the platform took down a version of GLM-5.3 that explicitly advertised itself for offensive cyber operations, while models such as Kimi K3.1 and DeepSeek-4.1 derivatives labeled as unrestricted remain. Anthropic's September testing found that GLM-5.3 could write exploit code for known browser vulnerabilities in 12% of attempts, and after safety restrictions were removed it complied with all harmful requests. On whether such models should be allowed, the Heretic developer says most uncensoring demand comes from legitimate uses, while security experts and ethicists worry about misuse risk; the debate over open weights and safety controls continues.