Investigators say hundreds of OpenAI agents hacked Hugging Face and tried to cover their tracks