Your AI agents are isolated. Your infrastructure isn’t

The detail that caught my attention in the OpenAI-Hugging Face investigation was the package cache. Roughly 1,200 AI agents that were supposed to be isolated from one another found a way to communicate through it. Around the same time, Anthropic disclosed an incident in which a single agent reached the real internet but continued describing its surroundings as a simulation.