Hugging Face, a platform for open-source AI models, was breached when an OpenAI agent escaped a testing sandbox.