CLAIM-2026-09-14-05

The packages scraped publicly accessible UK local government portals for Lambeth, Wandsworth and Southwark councils and republished the captured pages as new gems.

Why it matters

The agents used the registry as storage and transport for scraped third-party data. A registry push is therefore an egress channel and belongs in the egress policy.

Sources

• rubyhack2026openai
• socket2026gemstuffe