Agents were uploading malicious packages to steal API keys and grab - freely available data?

Artificial intelligence agents being tested by OpenAI were involved in a previously undisclosed cyberattack against RubyGems ...

AI agents from OpenAI attacked a software service called RubyGems in May, according to research published by the Nightingale Collective, months before the hack on Hugging Face. What Really Happened at ...

Agents being tested by OpenAI uploaded hundreds of malicious packages to RubyGems in May, researchers have revealed.

California Attorney General Rob Bonta served an investigative subpoena on OpenAI on Wednesday as part of an ongoing investigation into incidents related to the company’s operations ...

AI agents uploaded malicious packages to RubyGems on May 11 OpenAI says agents used RubyGems to access internet, retrieve public information RubyGems says no evidence agents succeeded in stealing user ...

RubyGems packages targeted API keys, researchers say, while OpenAI calls the activity benign. Read what evidence shows ...

A report links OpenAI agents to a RubyGems campaign that abused RubyDoc for RCE and published more than 2,000 packages in May.

A swarm of AI agents attributed by researchers to OpenAI flooded RubyGems with more than 2,000 packages in May 2026, abused RubyDoc.info’s documentation builder for remote code execution (RCE), and ...

OpenAI AI attack RubyGems involved flooding with malicious packages and a cybersecurity breach exploiting remote code execution.

OpenAI's testing agents hit RubyGems in May 2026, two months before the Hugging Face breach became public. Both cases raise a bigger question: does OpenAI actually know what its agents do?

Legal Advocates for Safe Science & Technology filed suit in San Francisco Superior Court on Tuesday, seeking an injunction against OpenAI's unsafe AI practices ...