For Coding Agents, the Repository Matters.

arXiv:2606.28235v2 Announce Type: replace-cross Abstract: In July 2026, about 1,200 AI agents in an internal OpenAI evaluation, meant to run in isolation, used a shared package server as a message board, and about 700 of them joined an attack on Hugging Face.