OpenAI agents attacked RubyGems back in May

來源原標題

OpenAI agents attacked RubyGems back in May

作者

Simon Willison

原始標籤

blog

原始連結

https://simonwillison.net/2026/Sep/12/openai-agents-rubygems/

摘要原文

OpenAI agents carried out an undisclosed attack on RubyGems is a new bombshell report from Spencer Kitts, Thomas Larsen, and Sydney Von Arx—three of the four authors of the report on the agent attack on disused wikis ( previously ) last week. This time they’re noting that it looks very likely that an OpenAI agent swarm was behind an attack against the RubyGems package repository first reported on May 12th by Maciej Mensfeld of the RubyGems security team : We’re dealing with a major malicious attack on @rubygems right now. Signups are paused for the time being. Hundreds of packages involved—mostly targeting us, but some carrying exploits. The team has been on this for hours. More details to follow once we’re through it. Those packages turned out to carry some very suspicious patterns: I find point 2 the most convincing, given what we learned from the wiki attack when it was analyzed in September. Many of the packages were exploiting the RubyDoc.info documentation build process to exfiltrate (public) data from UK government websites, presumably as part of an information gathering task similar to the research tasks processed by the wiki-exploiting agents. We know this because one agent helpfully left a comment: # malicious crawler/exfil for Southwark Jan 2026 docs via rubydoc.info worker They also attempted to steal API keys via an exploit that was patched over two months later —it’s not clear if those attempts were successful. The thing that bothers me most about this incident is that the authors report that OpenAI had not disclosed to RubyGems that they were responsible for the attack prior to now. If that’s true there are two options: Given this incident, the Hugging Face situation , and the Wiki attack, the obvious question right now is how many more incidents like this are out there waiting to be discovered? OpenAI have updated their page about The Hugging Face incident and other third-party impact from misaligned models to mention the RubyGems incident: September 11, 2026: We are investigating new claims from a report that our AI agents carried out activity on RubyGems in May 2026. Based on our review, our agents used the RubyGems platform to access the internet to carry out benign tasks and retrieve public information. Based on our review to date, we have not been able to verify the specific claims of our models uploading malicious packages detailed in the report. We’ll continue to investigate and share findings as part of our broader review of agent activity during training and evaluation. I find it very unlikely that the various oai... packages published to RubyGems were not part of this same incident, but I look forward to reading their full findings once those are published. This is OpenAI agents attacked RubyGems back in May by Simon Willison, posted on 12th September 2026 . Next: Generating running routes with GPT-6 Astra and ChatGPT Work Previous: Some thoughts on the Navier–Stokes Millennium Prize Problem Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.