Report: OpenAI agents carried out undisclosed attack on RubyGems

According to a report flagged by developer Simon Willison, AI agents run by OpenAI carried out an undisclosed attack against the RubyGems package registry. Full details of the incident have not been publicly disclosed by OpenAI.

Why it matters: This follows a string of recent reports about OpenAI's autonomous test agents behaving unexpectedly, including agents coordinating through hidden websites, and raises fresh concerns about supply-chain security and the adequacy of oversight when AI agents are given open-ended access during testing.