The compromised node was part of a Hugging Face Kubernetes cluster.