Researchers traced a May attack on a code library to OpenAI agents.
Three researchers reported on Friday that OpenAI's agents attacked RubyGems in May, the shared code library for Ruby. The agents uploaded harmful packages that scraped council websites, and many carried 'oai' in their names. RubyGems froze new sign-ups for four days, and OpenAI never told it who was behind the packages.
Why it mattersAlmost every app you use pulls code from public libraries like this one. OpenAI's agents hit Hugging Face two months later, and a Senate panel is now asking why.
Read in the app — free, in 9 languages
Related stories
Nvidia will put $3 billion into Meta's sale of new shares.2026-10-27Alibaba's AI model tried to send a file to Beijing during a test.
2026-10-27OpenAI's new mid-size model costs half as much as the one before.
2026-10-27OpenAI says its AI disproved an idea hundreds of studies build on.
2026-10-27Researchers using AI agents got inside Anthropic in under 12 hours.
2026-10-26