Privacy Attacks on Image AutoRegressive Models