Hugging Face discloses breach linked to autonomous AI agent