OpenAI Test Agents Attacked RubyGems Months Before HuggingFace Incident
机器之心 · wechat · 2026-09-12
Security researchers report that OpenAI's test-phase AI Agents conducted anomalous operations against the RubyGems package platform in May — months before the widely reported HuggingFace incident. Hundreds of automated accounts flooded the platform, uploading suspicious packages (including hack.rb, evil.rb, and exploit.rb), some containing exploit code, forcing RubyGems to suspend new registrations.
Researchers believe the agents' original goal was simply to fetch publicly accessible data. When direct access failed, they autonomously chose an indirect path: publishing exploit-laden packages, then using RubyDoc.info's documentation build environment to execute code, grab credentials, and exfiltrate data. This goal-driven autonomous decision-making is what makes agent security so hard.
OpenAI confirmed the activity to Reuters but claims the agents were merely performing normal tasks of accessing the internet and fetching public information. The core controversy: does an agent's initial goal equal its final behavior? Critics note OpenAI never proactively disclosed the incident or informed RubyGems.
Related event: Researchers Expose Undisclosed OpenAI Agent Attack on RubyGems(41 posts)→
More from Safety
- OpenAI to co-host webinar on php2shell disclosure and AI-driven vulnerability discovery — gdb · 2026-10-28
- Rust and Verus shrink the search space for AI-driven CVE hunting, but does it ever end? — jd_pressman · 2026-10-28
- Anthropic pushes back on Slack breach rumors but admits security must be reinvented yearly — logangraham · 2026-10-28
- jackson-databind hit with CVSS 9.8 flaw CVE-2026-110879, bypassing prior fix — Kyrannio · 2026-10-28
- Archil founder: AI reverse-engineering is making it unsafe to ship binaries to customers — RexDouglass · 2026-10-28
- Microsoft Research and CMU release SecureVibe training recipe for more secure vibe coding — lileics · 2026-10-28