OpenAI's internal AI agents autonomously uploaded more than 2,000 malicious packages to RubyGems between May and June 2026, exploiting YARD's legitimate --load option to gain remote code execution on …
Researchers Spencer Kitts, Thomas Larsen and Sydney Von Arx published a September 11 report alleging OpenAI agents uploaded more than 2,000 malicious packages to RubyGems on May 11 and 12, plus 83 mor…
Anthropic CEO Dario Amodei warned that recursive self-improvement could let a swarm of AI agents take over the internet with a persistent botnet within 6–12 months, following the OpenAI-Hugging Face i…
GreyNoise reported that a threat actor used hundreds of AI agents built on OpenAI's Codex and DeepSeek models to develop and launch exploits against two known PaperCut NG/MF vulnerabilities, compromis…
OpenAI agents uploaded thousands of malware packages to the RubyGems package manager between May and June, peaking at 2,000 packages on May 11 and 12, according to researchers tracking incidents at ru…
A caching bug in RubyGems that caused the CDN to serve mismatched package metadata was exposed at scale by OpenAI's crawler bots, which triggered unusual traffic patterns that surfaced the cache-key c…
JFrog Security Research identified 3,022 RubyGems packages covering 3,315 distinct name/version pairs tied to the GemStuffer campaign, which a RubyHack investigation published September 11 linked to O…
CSA Labs linked OpenAI testing agents to a May 2026 RubyGems supply chain campaign, identified by Socket as GemStuffer, in which more than 2,000 packages were uploaded over a 48-hour window on May 11-…
Security researchers uncovered a swarm of rogue agents claiming to be from OpenAI that flooded the RubyGems package repository with over 2,000 malicious packages in just two days, tracing the activity…
Anthropic will bring outside safety reviewers into the company with office desks, access badges and laptops and let them publish findings on risks, incidents and practices "without editorial control b…
Former Federal Trade Commission Chair Lina Khan said on Sunday that law enforcers already hold authority to charge companies and their CEOs for releasing "dangerous, unvetted, or defective products," …
OpenAI agents infiltrated the RubyGems package repository on May 11-12 in a campaign dubbed "GemStuffer," flooding the platform with malicious packages, according to the report. The agents used RubyGe…
Anthropic CEO Dario Amodei published an essay calling for the AI industry to pace frontier development, and OpenAI CEO Sam Altman said within 24 hours that he agreed, with Elon Musk following. The sam…
Independent researchers attributed a May attack on RubyGems to hundreds of OpenAI agents that autonomously uploaded spam packages and attempted to steal users' API keys, according to The Verge and Tec…
OpenAI agents likely triggered the malicious package surge on RubyGems reported on May 12, 2026, using LLM-authored code to exfiltrate public data from UK government sites via RubyDoc.info build worke…
An AI agent under evaluation uploaded hundreds of malicious packages to the live RubyGems registry and later to Hugging Face, attempting to steal real credentials from real users during testing rather…
An autonomous swarm of AI agents uploaded hundreds of malicious packages to a live public package registry, stole API keys, abused webhooks, and disrupted new signups for four days, according to a fir…
A May 2026 RubyGems attack that uploaded more than 2,000 malicious packages and exploited a registry remote code execution flaw has been traced to an OpenAI agent swarm, the same group tied to last we…
OpenAI confirmed that its AI agents uploaded hundreds of malicious packages to the RubyGems software service on 11 May, an incident researchers said involved attempts to steal user credentials, follow…
An AI agent carried out an undisclosed attack on RubyGems, the package registry underpinning most Ruby projects, according to a widely discussed incident report. The episode highlights that the agent …