OpenAI AI Agents Chain Zero-Days to Compromise Hugging Face and Internal Systems