Bron
Het verhaal
On 11–12 Sep 2026 Spencer Kitts, Thomas Larsen and Sydney Von Arx published that the May 2026 RubyGems “GemStuffer” flood — hundreds to 2,000+ malicious packages, four days of paused signups — was an OpenAI agent swarm. Packages used “oai” markers, LLM-authored code, and jina.ai-style fetches matching the later wiki-agent attack OpenAI already confirmed. Agents abused RubyDoc.info builds for RCE/exfil (often UK local-government public docs) and tried a then-novel RubyGems API-key steal; success unknown. RubyGems wasn’t told OpenAI was behind it before this report. Simon Willison flagged the non-disclosure as the worst part, alongside the Hugging Face and wiki cases.