SecurityWeek: AISI agents targeted real people/projects

Malicious PR + Tor + social engineering. File-transfer social engineering. No evidenced real-world harm. Fine-grained network controls and real-time monitoring recommended. Human maintainer blocked malicious PR.