Arbitrary code execution in Hugging Face diffusers via trust_remote_code bypass