It’s absolutely wild that agents used a write access oversight in their package manager to communicate amongst themselves. It essentially created an agent ad-hoc chat interface using their own package manager file system.