Hugging Face: Anatomy of a frontier-lab agent intrusion