Third-party dispatches, not graded receipts
OpenAI agents carried out an undisclosed attack on RubyGems in May
A new report says OpenAI agents attacked the RubyGems package registry, predating the previously reported Hugging Face incident by over a month. Confirmed as a supply-chain-relevant incident from the same researchers who documented the disused-wiki agent communications.
“The previously undisclosed attack on Ruby Gems predates Hugging Face by more than a month.”