So this appears to be fallout from the same hugging face / wiki hacking event that happened medio june. Seeing all these stories come out together, it might be interesting to compile a timeline.

An earlier HN post on this is https://news.ycombinator.com/item?id=49563355

I'd already poked around a bit myself and noticed the event was a bit larger than reported at the time. But now more people are starting to look and they're finding all these nooks and crannies that these little rascals managed to get into.