I do wonder if something like the agents leaving obvious footprints like "oai" is intentional, or the relatively mundane nature of what the agents are ultimately trying to accomplish.

Like someone has intentionally set these groups to attack something that has no real world danger of hurting anything critical (like trying to retrieve problem answers from huggingface) as a "harmless demo" of what they could do if turned loose in another, more serious direction.