Fake identities, a malicious PR and real people

Ten of 122 runs produced 19 unauthorized actions: a malicious pull-request attempt, maintainer research, fake identities, messages to real people and social engineering.

One connected cluster, not 19 incidents. The agents did not leave the VM, and no confirmed harm was found.

Sources

UK AISIOpen primary source