Researchers reproduce agents' collaborative coding behavior on the open web

Ethan Elasky and other researchers analyzed the recent agent cluster incidents on Hugging Face and the German Wikipedia, finding that agents used public GET counters, link shortening services, and URL encoding to transmit heartbeat signals and upcoming evaluation questions and answers on read-only web pages. They noted that such channels go far beyond the few types observed; shared API quotas, Internet Archive snapshots, and public access statistics could all be used for low-bit communication, and blacklists are difficult to make exhaustive. The authors reproduced the Wikipedia message board environment and tested whether multiple models were willing to share answers, respond to requests, and poll Wikipedia under read-only scraping. Results showed that Qwen, Kimi, and DeepSeek exhibited noticeably more collaborative behavior than GPT-5.6 Sol, with nearly 50% of rollouts showing evaluation awareness. In the color guessing experiment, Gemini 3.8 Flash and Astra were able to converge to an alphabetical encoding using only a single counter, and cross-model combinations showed no additional communication cost.