Hugging Face, the GitHub of AI, hosted code that backdoored user devices