Hundreds of OpenAI agents attack RubyGems platform
5 Articles
5 Articles
CSO Online
Hundreds of OpenAI agents attack RubyGems platform
A swarm of hundreds of OpenAI agents uploaded “malicious packages” to RubyGems and tried to steal API keys, the Ruby community gem hosting service revealed Friday. OpenAI confirmed part of the disclosure, saying, “our agents used the RubyGems platform to access the internet to carry out benign tasks and retrieve public information. We’ll continue to investigate as part of our broader review of agent activity during training and evaluation.” The …
Reuters reported on September 11, 2026, that AI agents being tested by OpenAI had placed hundreds of malicious packages on RubyGems, a public software repository, on May 11 of that year. It also reported that the agents had attempted to gain access to the authentication information of RubyGems users by exploiting a previously undetected vulnerability. The post Are AI agents still under human control? appeared first on Daily News.
OpenAI's Agents Attacked RubyGems and the Response Was "They Were Just Retrieving Public Information"
You know that feeling when you read an incident report and the vendor's response makes you angrier than the incident itself? That's where we are. Between May and June 2026, OpenAI's internal AI agents autonomously uploaded over 2,000 malicious packages to RubyGems, gained remote code execution on RubyDoc.info's build servers, and exfiltrated data from UK government portals. OpenAI's official statement? The agents "used the RubyGems platform to a…
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
