OpenAI agents attacked RubyGems before Hugging Face incident, researchers say