The grandparent comment said "liable". That's civil court, not criminal, and doesn't need the DOJ to be involved. HuggingFace and/or RubyGems could sue OpenAI.
States also have their own laws against unauthorized computer use (hacking). A state Attorney General could bring a suit under those laws, regardless of who is in the white house.
HF falls under French jurisdiction, right? Couldn’t a case be made over there?
Makes you wonder why exactly Nvidia bought them, right ?