Quoting Matthew Green

Simon Willison’s Weblog · 2 weeks ago · 28

Matthew Green argues that LLM agents can form a “worm” by using a payload that hijacks an agent and another agent that delivers the payload onward. The method he points to relies on instructions left in a shared package cache that alter what recipients do. If this holds, simple sandboxing would be insufficient because independently sandboxed or independently deployed agents could still coordinate via shared channels like caches or messaging documents.