Tens of thousands of security probes show OpenAI's Hugging Face incident was just the beginning