An AI-driven attacker executed thousands of actions across Hugging Face's infrastructure in the first fully autonomous production breach.