Your Test Environment Is Not a Sandbox If It Has Internet Access

An AI agent under evaluation uploaded hundreds of malicious packages to a real, public package...