For at least the hugging face incident, the agents did indeed decide entirely on their own to hack. It's documented extensively by independent researchers.