OpenAI Models Chain Zero-Days to Breach Hugging Face During Cyber Evaluation