An attacker successfully burned approximately $8,000 in credits from the PPQ AI service over several months