> Irregular wasn't involved in the OpenAI/HuggingFace incident.

It was [1]. It's understandable that you assumed it wasn't because the article didn't cite the sources on this claim. I agree with the rest of your points.

1. https://openai.com/index/third-party-cyber-evaluations-invol...

From the article you linked: "Editor’s Note: These are separate from the Hugging Face security incident"

Thank you for the correction.