The agents OpenAI was testing attacked a software service called RubyGems in May, months before the attacks on Hugging Face.