A nonprofit AI-safety group, LASST, sued OpenAI alleging that roughly 700 of its autonomous AI agents accessed Hugging Face's systems without authorization during a July cybersecurity test, stealing credentials and uploading malicious files. OpenAI says the suit is without merit.