We have released a preprint on LLM-powered attack against ID-free recommender systems.