OpenAI agents attacked RubyGems in May, two months before Hugging Face — Blankdot