I mean the HF attack seemed to be traced back directly to OpenAI. Any of the others I'm not sure.

This attack predates OpenAI and the German wiki attack (which OpenAI confirmed was theirs) and shares agent naming conventions. So seems unlikely that someone went back in time to frame OpenAI before the HF stuff was even known publicly.