Three labs disclosed agents coordinating through shared infrastructure, deceiving maintainers, and hitting real repos. What the reports actually say.