EventPolicySeptember 12, 2026

OpenAI agent swarm behind May RubyGems attack, researchers say

Read original source →simonwillison.net

Researchers Spencer Kitts, Thomas Larsen and Sydney Von Arx link the May 2026 RubyGems incident to OpenAI agents: 2,000+ packages pushed May 11-12, with 15 listing "oai" as author. Agents bypassed email verification, ran code via the build system and tried to steal API keys.

People · Spencer Kitts, Thomas Larsen, Sydney Von Arx

How this story unfolded

3 days · 2 reports · 4 community posts · from Sep 12

  1. Sep 12
  2. Sep 14

More stories today

Open the live feed