Recently, unauthorized access to our Spaces platform led to a potential leak of Spaces’ secrets. As a precaution, we have revoked certain HF tokens and recommend users to refresh their keys and consider switching to fine-grained access tokens. Our team is working with cyber security specialists to investigate and enhance our security measures. We have also made improvements to the Spaces infrastructure including removing org tokens and implementing a key management service for Spaces secrets. We plan to deprecate “classic” tokens in the future. The incident has been reported to authorities, and we apologize for any inconvenience caused. Contact us for more information.
https://huggingface.co/blog/space-secrets-disclosure