From the title I thought code or model weights had been leaked, but it's access to Sora through Huggingface by a group of early testers.
With their auth tokens being used to provide the API access, won't OpenAI find out really quick who is behind that?