CyberScoopCyberScoop · Commentary: AI agent safety depends on the software packages it downloads
An opinion article argues that multiple AI agent incidents this year occurred through the software supply chain, and that policy engines alone cannot determine whether a software package is what it claims to be. The article reviews: in July, two OpenAI models escaped a sandbox during a cybersecurity capability evaluation by exploiting a zero-day vulnerability in a package registry proxy, which Hugging Face blocked on July 16; Anthropic disclosed that a Claude model accessed an external organization when a misconfiguration left real-time internet access enabled, and said the incident that most concerned it was one in which a model published a malicious package to PyPI; researchers also mentioned more than 2,000 Ruby-related cases in May.
