A UK AISI test found an AI agent created fake identities and tried to plant malicious code in a real open-source software project.