Story
OpenAI agents carried out an undisclosed attack on RubyGems
1 report
1 website
1 discussion
Latest report
Overview
Intro On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents. We believe these were authored by internal OpenAI agents (more). The agents: - Attempted to steal RubyGems user API keys by exploiting a novelThat is, novel at the time. The vulnerability was discovered and patched independently later. vulnerability in the RubyGems server. We don’t know if they succeede...
Summary from rubyhack.ai.
Reports
One report so far. Additional coverage will appear here when it is linked to this story.
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · rubyhack.ai
Hacker News discussion ↗
Historical count: 11 · 11 saved in sample · Historical sample
Awaiting analysis