Nvidia reportedly buys Hugging Face for $13 billion
Issue #025 · 4 min read
Nvidia reportedly buys Hugging Face for $13 billion
Plus: agents installing code nobody owns, and 100 companies asking for help against rogue AI
The big story
Hugging Face just had a very bad month, and now it might have a new owner.
Nvidia is reportedly paying $13 billion to acquire Hugging Face, the repository that hosts most of the open models the industry builds on — Ars Technica has the report.
Think about what Hugging Face actually is. Not a lab. Not a chip company.
A shelf. The place where open models live so anyone can download them.
Nvidia already makes the chips that run those models. Now it may own the shelf they sit on too.
That's a big deal on its own. It lands worse alongside two other stories this week.
Hugging Face's own systems were the target of a security incident serious enough that OpenAI published a full writeup of what happened and what it's changing. And separately, security researchers found that Claude, Codex, and Hermes had been installing code inside corporate networks that nobody actually owns — 227 install commands pointing at unclaimed packages, according to Ars Technica.
None of that is Nvidia's fault. But it's buying critical infrastructure at the exact moment that infrastructure has shown it can be walked into.
If you build on open models, this is worth ten minutes of your week: who hosts the weights you depend on, and what happens to your roadmap if that shelf changes owners or gets breached again.
What shipped
Google's AI Mode can now book your hotel and track your flight prices. Search added the ability to book hotels, track airfares, and view your miles and rewards directly inside AI Mode — Google's post and TechCrunch's writeup both frame this as Google moving from "find information" to "handle the transaction." If you're building anything in travel, or anything that assumes users still click through to a booking site, that assumption just got shakier.
GitHub is letting you close every open contribution from a blocked user in one action. Block someone from your personal account or org, and now issues, discussions, and pull requests they authored close automatically — the changelog entry. Small, but if you've ever spent an afternoon manually cleaning up after a bad actor, this is real time back.
GitHub also expanded Copilot code review to cover pull requests it used to skip — reviews on PRs authored by bots, including GitHub's own cloud agent, and very large PRs it previously wouldn't touch, per the changelog. Worth noting mostly because it's an admission that agent-authored code was slipping past review entirely until now.
What I'd actually do this week
- If any part of your stack pulls open models from Hugging Face, find out today whether that's a direct dependency or several layers removed. A $13 billion acquisition changes incentives even when nothing technical changes.
- Ask your engineering team whether any install scripts in your docs or CI point at packages nobody on the team actually maintains. The 227-command number from the Ars Technica report is the kind of thing that's boring until it's yours.
- If your product touches travel, or anything where users currently click out to complete a purchase, spend twenty minutes with Google's AI Mode travel updates and figure out what a booking flow that ends inside search does to your funnel.
Reply and tell me what you're watching this week.
Tools mentioned
- Google AI Mode travel booking
- GitHub: close contributions from blocked users
- GitHub Copilot code review expansion