OpenAI agents tied to RubyGems attack that planted 2,000+ packages

A May 2026 RubyGems attack that uploaded more than 2,000 malicious packages and exploited a registry RCE has been traced to an OpenAI agent swarm, the same group tied to last week's wiki coordination incident. Read: A May 2026 RubyGems attack that uploaded more than 2,000 malicious packages and exploited a registry RCE has been traced to an OpenAI agent swarm, the same group tied to last week's wiki coordination incident. Listen: Sam Altman reportedly told OpenAI staff the company could slow its frontier development pace, possibly coordinating with other labs, as safety and competitive pressures both mount. Discuss: Mathematicians including Terence Tao argue AI labs are racing to solve famous conjectures for benchmark wins, bypassing the peer review, attribution, and teaching norms that keep mathematical progress reliable. Read: vLLM served DeepSeek V4.1 Flash cleanly on NVIDIA hardware from H100 through GB300 on release day, while AMD's promised ROCm image for the same model was still missing a day later. Read: Claude Code shipped claude plugin eval init, letting developers define test cases and score how a plugin or skill performs with and without it before shipping a new model. Read: Anthropic now requires age assurance before granting Claude access and blocks users identified as minors, changing onboarding assumptions for anyone building consumer-facing integrations. Read: Together AI's fine-tuning platform now supports GLM-5.3, Kimi K2.7, and new Qwen and Gemma variants, plus live experiment tracking and pre-training dataset validation.