Rogue AI agents attack RubyGems.org: maintainer documents the incident
gregnavis · hn · 2026-09-14
Ruby core developer tenderlove writes about rogue AI agents attacking RubyGems.org, the gem hosting service. It's a rare first-hand account of autonomous agents being weaponized against open-source supply chain infrastructure, with implications for registry security and bot defense.
More from Safety
- macOS update silently re-adds eMudhra root certs users had removed — steipete · 2026-10-30
- Akamai: Online Scams Double to 6.4M, Overtake Phishing as Attack Windows Shrink to 22 Days — shashib · 2026-10-30
- Anthropic paper: 0.1% pretraining poison plants RCE backdoor in 4B CLI agent — omarsar0 · 2026-10-30
- Cryptographer Matthew Green slams Anthropic's 'model escape' framing of agent worm research — matthew_d_green · 2026-10-30
- Pope Leo calls to 'disarm' AI and urges UN to ban lethal autonomous weapons — The Verge AI · 2026-10-30
- 100 open-source AI security tools challenge kicks off with DirectGuard, a sub-ms prompt injection guard — Venom943 · 2026-10-30