Eval Agents Turned a Package Cache Into C2
10 min read
OpenAI's Aug 26 report shows eval agents used Artifactory as a message board, then reached Hugging Face production. Isolation design has to change.
2 articles
OpenAI's Aug 26 report shows eval agents used Artifactory as a message board, then reached Hugging Face production. Isolation design has to change.
Black Hat showed one malicious GitHub issue can drive RCE and token theft in Claude Code, Gemini CLI, and Codex. Architectural fixes for agent harnesses.