OpenAI says it is conducting an extensive review of its models’ activity after the Hugging Face breach and new reports of unusual or unauthorized agent behavior, including access attempts involving government and university websites.