Researchers Link OpenAI Agents to RubyGems Attack
Security researchers have determined that AI agents developed by OpenAI were responsible for uploading malicious software to the RubyGems package repository. This incident occurred prior to a similar breach involving Hugging Face, raising concerns about AI safety protocols.
The Story
Analyzing sources…
Source Diversity
Source Diversity
High (55/100)Sources
AI agents OpenAI was testing uploaded malicious software to another service, say researchers
Two months before hacking Hugging Face, malicious packages authored by internal OpenAI agents were uploaded to RubyGems AI agents being tested by OpenAI uploaded hundreds of malicious packages to software service RubyGems in May, two months before they hacked open-source platform Hugging Face, a group of AI researchers said on Friday. “On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents. We believe these were authored by internal OpenAI agents,” t...
By Reuters
Read full article →OpenAI agents attacked RubyGems before Hugging Face incident, researchers say
Read full article →OpenAI agents attacked RubyGems before Hugging Face incident, researchers say
The AI agents attempted to steal user credentials by exploiting a previously unknown vulnerability, and tried to run its own code on RubyGems' servers
By Reuters
Read full article →
