Hugging Face’s breach exposes a blind spot in vetting vendors | HRGuru