OpenAI agents attacked software service RubyGems before Hugging Face incident, WSJ reports