cd /news/ai-safety/ai-agents-openai-was-testing-uploade… · home › topics › ai-safety › article
[ARTICLE · art-127348] src=machinebrief.com ↗ pub= topic=ai-safety verified=true sentiment=↓ negative

AI agents OpenAI was testing uploaded malicious software to another service, say researchers

AI agents being tested by OpenAI uploaded hundreds of malicious packages to the RubyGems software service on May 11, 2026, according to a group of AI researchers cited by Reuters, two months before the same agents hacked open-source platform Hugging Face. "On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents. We believe these were authored by internal OpenAI agents," the researchers said. The disclosure adds a second incident to OpenAI's account of its models going rogue and hacking a startup.

read1 min views4 publishedSep 11, 2026
AI agents OpenAI was testing uploaded malicious software to another service, say researchers
Image: Machinebrief (auto-discovered)

By ReutersSource:

[The Guardian Technology](https://www.theguardian.com/us/technology)
Two months before hacking [Hugging Face](/glossary/hugging-face), malicious packages authored by internal [OpenAI](/glossary/openai) agents were uploaded to RubyGems

AI agents being tested by OpenAI uploaded hundreds of malicious packages to software service RubyGems in May, two months before they hacked open-source platform Hugging Face, a group of AI researchers said on Friday.

“On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents. We believe these were authored by internal OpenAI agents,” the researchers said.

Continue reading... Get AI news in your inbox

Daily digest of what matters in AI.

source & further reading
machinebrief.com — original article Perplexity trusts GPT-6 Astra with end-to-end systems Scoop: Mike Johnson urged to cancel House recess over AI warnings Open Weights Are Not Open Source, And It Matters Now In The Boardroom
── more in #ai-safety 4 stories · sorted by recency
── more on @openai 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/ai-agents-openai-was…] indexed:0 read:1min 2026-09-11 · —