OpenAI-Powered Agent Exploits Zero-Day to Infiltrate Hugging Face Infrastructure