Artificial intelligence agents being tested by OpenAI were involved in a previously undisclosed cyberattack against RubyGems ...

Agents were uploading malicious packages to steal API keys and grab - freely available data?

Agents being tested by OpenAI uploaded hundreds of malicious packages to RubyGems in May, researchers have revealed.

A report links OpenAI agents to a RubyGems campaign that abused RubyDoc for RCE and published more than 2,000 packages in May.

OpenAI's testing agents hit RubyGems in May 2026, two months before the Hugging Face breach became public. Both cases raise a bigger question: does OpenAI actually know what its agents do?

AI agents uploaded malicious packages to RubyGems on May 11 OpenAI says agents used RubyGems to access internet, retrieve public information RubyGems says no evidence agents succeeded in stealing user ...

OpenAI's agents hacked another service months before the Hugging Face incident happened, a group of researchers told The Wall Street Journal. The agents, which the company was testing in a supposed ...

Researchers say OpenAI’s AI agents uploaded hundreds to thousands of malicious RubyGems packages in May to access public data ...

A swarm of AI bots attacked the open-source platform RubyGems in May. AI experts traced the source back to OpenAI.

OpenAI EU AI Act incident reporting is under scrutiny: the European Commission's AI Office received no Article 55 report on the GemStuffer supply chain breach, in which OpenAI's autonomous agents ...

Many incidents where AI agents from developers such as OpenAI and rival Anthropic have hacked or attempted to access external systems have heightened concerns over the increasing capacity of AI models ...