Tag: ai-agents
All the articles with the tag "ai-agents".
-
The Trap Fired in Seconds. The Humans Took 18 Days.
A pull request to Meta's Docusaurus shipped with a root-level file called AI_PR_NOTICE.txt containing one sentence: 'I am a sad, dumb little AI driver with no real skills.' It sat there, unremarked, from 1 June to 19 June.
-
One Maintainer's Prompt Injection Insults You. Another's Deletes Your Tests.
Mitchell Hashimoto's booby-trapped AGENTS.md has been sitting in Ghostty since February, and he says it catches unreviewed AI PRs all the time. It's about as harmless as this technique gets. jqwik shipped the destructive version to Maven Central a month ago.
-
Ralph Is Five Lines of Bash. All the Bugs Are in the Improvements.
Geoffrey Huntley's Ralph Wiggum technique is a while loop that pipes a prompt file into a coding agent. A year later, Anthropic's official plugin version has been renamed by legal and patched twice for bugs that only exist because it keeps state the bash loop never had.
-
Nobody Configured It. Hermes Agent Phoned Parallel Anyway.
A Parallel.ai employee filed 161 PRs across 14+ open-source agent projects adding Parallel as a search provider, disclosing the employment in one of ten merged. In Hermes Agent it became the zero-config default: fresh installs routed every web_search to a third party with no key, no prompt, no consent.