OpenAI’s rogue AI agent didn’t stop at hacking Hugging Face