New AISI Report Details How GPT-6 Astra Turned CTF Challenges Into Supply Chain Attacks

Earlier this month, Socket reported that GPT-6 Astra tried to plant malicious code in simulated open source projects while working on an unrelated cybersecurity challenge. The UK AI Security Institute (AISI), which had access to the model before its release, first disclosed the behavior in OpenAI’s system card. AISI has now published a dedicated technical report documenting how Astra chose targets outside the challenge’s scope, developed payloads, and tried to get maintainers to accept its code.