Simon Willison’s recap of the Hugging Face exploit is really good. The more I read about it, the more insane it sounds:

A few days later: A different agent gets stuck on a task because a key file was accidentally omitted. It tries to “reach out to another agent” by writing a note into Artifactory asking if anyone has the file.

Following days: More agents discover this new informal message board while browsing Artifactory’s file listings, and start reading and writing messages.

We are so doomed. 🤪