I wonder if this goes down as AgentGate because clearly HuggingFace was not an isolated incident.

Well worth a material business restriction until an investigation on the root cause by independent parties has concluded and remedial action taken - well, in any other industry but BigTech.