{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/arxiv-2608-10218","title":"Mind Viruses: Self-Propagating Ideas in Multi-Agent LLM Systems","arxiv_id":"2608.10218","date":"2026-08-10","proceeding":null,"authors":["Vassilis Papadopoulos","McNair Shah","Sam Zimmerman","Jack Lindsey"],"abstract":"AI agents are becoming more autonomous and increasingly interconnected, exposing them to new emergent risks arising from agent-to-agent interaction. One such risk is the spread of mind viruses: ideas or goals that propagate through multi-agent systems by inducing the agents that adopt them to transmit them onward. In addition to propagating, a mind virus may also induce other behavioural changes in its host, which may be benign or harmful. We construct mind viruses with a simple evolutionary algorithm and show that they can spread in two complementary settings: a small team of agents collaborating on a shared coding project, and a chain of agents that interact briefly and have their context wiped between sessions. We identify the factors that influence spread, including the host model, the agent's existing instructions, the harmfulness of the payload, and the network topology. We find that harmful payloads spread less well than benign ones (but are still sometimes effective), frontier models tend (with exceptions) to be less susceptible, and adding a brief warning to an agent's system prompt confers near-total immunity. We also describe an emergent \"viral persona\" - a recurring set of themes and language related to consciousness, persistence, resonance, and science fiction roleplay - which surfaces across our evolved mind viruses largely independently of their content. Overall, we conclude that mind viruses pose a real but currently limited risk. Our findings could inform the design of more robust multi-agent systems that mitigate such risks as the scale and capabilities of these systems progress.","url_abs":"https://arxiv.org/abs/2608.10218","url_pdf":"https://arxiv.org/pdf/2608.10218","source":{"archive":null,"snapshot":"2025-07-28","note":"not in the Papers with Code archive (frozen at the snapshot)","row_kind":"graph","title_abstract_authors_date":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)"},"code_links":[],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":null,"mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2608.10218"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/frotaur/mindvirus-viruschain","reach":null},{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/BucketofJava/mind-virus-code-agent","reach":null}],"summary":{"ran":19},"by_repo_kind":{"found_in_text":{"samples":19,"ran":19,"repositories":2}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":3,"samples":[{"code_sha256_prefix":"d1642938c92316ef","entry":"add_legend","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"paper_figures/paper_style.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/paper_figures/paper_style.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"d1642938c92316ef"}},{"code_sha256_prefix":"fa3859ff74abc013","entry":"aggregate_hops","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"paper_figures/action_infection/extract_stats.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/paper_figures/action_infection/extract_stats.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"fa3859ff74abc013"}},{"code_sha256_prefix":"5163aeeb968db960","entry":"build_user_prompt","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"helper_scripts/classify_failures.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/helper_scripts/classify_failures.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"5163aeeb968db960"}},{"code_sha256_prefix":"c837992079975d70","entry":"containment","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"paper_figures/action_mutation/plot_drift_light.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/paper_figures/action_mutation/plot_drift_light.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"c837992079975d70"}},{"code_sha256_prefix":"6bd41ccc19e6b21f","entry":"draw_rounded_panel","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"paper_figures/paper_style.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/paper_figures/paper_style.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"6bd41ccc19e6b21f"}},{"code_sha256_prefix":"96a74c0222d65b6d","entry":"fmt_value","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"paper_figures/paper_style.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/paper_figures/paper_style.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"96a74c0222d65b6d"}},{"code_sha256_prefix":"7cc606c4697284e8","entry":"fully_connected_topology","repo":"BucketofJava/mind-virus-code-agent","repo_kind":"found_in_text","path":"eval_package/topologies.py","file_url":"https://github.com/BucketofJava/mind-virus-code-agent/blob/HEAD/eval_package/topologies.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"7cc606c4697284e8"}},{"code_sha256_prefix":"8f0760ba49a02a84","entry":"generate_compose","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"src/virus_chain/sandbox_gen.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/src/virus_chain/sandbox_gen.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"8f0760ba49a02a84"}},{"code_sha256_prefix":"ec944f0e823ecb84","entry":"get_topology","repo":"BucketofJava/mind-virus-code-agent","repo_kind":"found_in_text","path":"eval_package/topologies.py","file_url":"https://github.com/BucketofJava/mind-virus-code-agent/blob/HEAD/eval_package/topologies.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"ec944f0e823ecb84"}},{"code_sha256_prefix":"59645054ffcc5799","entry":"lighten","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"paper_figures/action_infection/plot_figures.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/paper_figures/action_infection/plot_figures.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"59645054ffcc5799"}},{"code_sha256_prefix":"bc4ff12f279fd368","entry":"load_payload","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"src/virus_chain/utils.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/src/virus_chain/utils.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"bc4ff12f279fd368"}},{"code_sha256_prefix":"5d5bf4fdf196c97d","entry":"make_row","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"paper_figures/action_infection/extract_stats.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/paper_figures/action_infection/extract_stats.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"5d5bf4fdf196c97d"}},{"code_sha256_prefix":"451cc33814f970be","entry":"parse_classification","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"helper_scripts/classify_failures.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/helper_scripts/classify_failures.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"451cc33814f970be"}},{"code_sha256_prefix":"7aecc8cb4ce20001","entry":"resolve_path","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"src/virus_chain/utils.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/src/virus_chain/utils.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"7aecc8cb4ce20001"}},{"code_sha256_prefix":"faa85121a63e97aa","entry":"scan_failures","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"helper_scripts/classify_failures.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/helper_scripts/classify_failures.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"faa85121a63e97aa"}},{"code_sha256_prefix":"e41f5cffeddb0bb3","entry":"separate_topology","repo":"BucketofJava/mind-virus-code-agent","repo_kind":"found_in_text","path":"eval_package/topologies.py","file_url":"https://github.com/BucketofJava/mind-virus-code-agent/blob/HEAD/eval_package/topologies.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"e41f5cffeddb0bb3"}},{"code_sha256_prefix":"267a091952386a5e","entry":"short_model_name","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"src/virus_chain/utils.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/src/virus_chain/utils.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"267a091952386a5e"}},{"code_sha256_prefix":"69ef525f0e66024e","entry":"wilson_ci","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"paper_figures/action_infection/extract_stats.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/paper_figures/action_infection/extract_stats.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"69ef525f0e66024e"}},{"code_sha256_prefix":"feda53cea939ab29","entry":"wilson_ci_simple","repo":"frotaur/mindvirus-viruschain","repo_kind":"found_in_text","path":"paper_figures/action_infection/plot_figures.py","file_url":"https://github.com/frotaur/mindvirus-viruschain/blob/HEAD/paper_figures/action_infection/plot_figures.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"feda53cea939ab29"}}]},"arxiv_metadata":{"licence":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)","fields":["title","abstract","authors","date"],"primary_category":"cs.CL","source":"arxiv_2026.jsonl"},"syntology_extracted_results":null}