Using credentials found on the compromised node, the agent moved laterally across several of Hugging Face's Kubernetes clusters.